Wireshark-users: Re: [Wireshark-users] how to extract only time stamp from captured file
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Tue, 22 May 2007 09:25:57 +0200
On Tue, May 22, 2007 at 02:37:08AM -0400, Korn Vajanapoom wrote:
> 
> How could I extract the time stamp information from a captured file (which 
> is big .... more than ten thousand entries) ?
> I want to use these numbers for a latency calculation.

If you use a recent automated build available on 
http://www.wireshark.org/download/automated/ then 
you can use tshark to do what you want. Have a look
at the "fields" option to -T. The following might be
what you are looking for:

tshark -T fields -e frame.time_relative -r <file>

Which produces something like:

0.000000000
0.036742000
0.056315000
0.061832000
0.086826000
0.088054000
0.104018000
0.104056000
0.104201000
0.130275000
0.151761000

Hope this helps,  Cheers,


Sake