Ethereal-users: Re: [ethereal-users] Tethereal and timestamps

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: gharris@xxxxxxxxxxxx
Date: 31 Aug 2000 11:57:29 -0700
On Wed, 30 August 2000, Andrew Miles wrote:
> Am I missing something?

Yes, you're missing the parenthesized note in the Tethereal man page, in the paragraph:

"When printing a decoded form of packets, Tethereal prints, by default, a summary line giving a time stamp for the packet if it's
reading a capture file (but not if it's printing packets as it captures them), the source and destination address for the packet, the
top-level protocol for the packet that Tethereal understands, and a summary of the packet's contents for that protocol. If the -V flag
is specified, it prints intead a protocol tree, showing all the fields of all protocols in the packet."

Tethereal, in imitation of snoop, only prints the time stamp when reading an existing capture file, not when doing a live capture.