Wireshark mailing list archives
tshark display filter / time
From: Stuart Kendrick <skendric () fhcrc org>
Date: Sun, 30 Oct 2011 07:03:50 -0700
How do I persuade tshark to display both Relative Time and Delta Time? Obviously, 'time.delta' and 'time.relative' don't mean much ... guru> tshark -r sample.pcap -T fields -e frame.number -e time.delta -e time.relative -e ip.src -e ip.dst frame.number time.delta time.relative ip.src ip.dst 1 10.12.5.123 10.12.18.116 2 10.12.18.116 10.12.5.123 3 10.12.5.123 10.12.18.116 4 10.12.18.116 10.12.5.123 --sk Stuart Kendrick FHCRC ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- tshark vs dumpcap Stuart Kendrick (Oct 30)
- tshark display filter / time Stuart Kendrick (Oct 30)
- Re: tshark display filter / time j.snelders (Oct 30)
- Re: tshark vs dumpcap Shawn T Carroll (Oct 30)
- Re: tshark vs dumpcap Marco Zuppone (Oct 30)
- Re: tshark vs dumpcap Guy Harris (Oct 30)
- Re: tshark vs dumpcap Jim Aragon (Oct 30)
- tshark display filter / time Stuart Kendrick (Oct 30)