Ethereal-users: [Ethereal-users] format of the time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jonathan Lynch <jlynch@xxxxxxxxxxxxxxxxxx>
Date: Thu, 30 Jun 2005 13:05:36 +0100
I capture packets to pcap file with the following command. 

tethereal proto 17 and dst port 13666 -w mylog.pcap

I process this output and only print out the values that I require.

tethereal -z "proto,colinfo,ip.id,ip.id" -o "column.format: time, %At,
Proto, %p, Info, %i" -r mylog.pcap

Sample output is 
11:32:00.908040 UDP Source port: 21360  Destination port: 13666  ip.id
== 0x0000

I am printing out the absolute time. 

Is there any way that I can get tethereal to print out the time in
seconds since the epoch ??

I presume tethereal uses gettimeofday and can processes the timeval
structure. I want to be able to scan the time into a timeval structure
using a C program. 

I would appreciate if anyone could answer my question

Jonathan Lynch