Wireshark · Wireshark-users: Re: [Wireshark-users] How to export the captured frames' timestamps?

[j.snelders@xxxxxxxxxx]

Hi John,

TShark can do the job:
tshark -r beacon.pcap -R wlan.fc.type_subtype==0x08 -T fields -e frame.time
-E header=y > beacon.csv

Output:
frame.time
May 13, 2009 16:54:42.820083000
May 13, 2009 16:54:42.863314000
May 13, 2009 16:54:42.878562000
May 13, 2009 16:54:42.887561000

http://www.wireshark.org/docs/man-pages/tshark.html

Regards
Joan


On Wed, 13 May 2009 13:43:44 +0930 John Wang wrote

>I used Airpcap adapter and Wireshark to capture 802.11 beacon frames. I'm
>intresting about the beacon frames' timestamp. Does anyone know how can
I
>export all the captured frames's timestamp from an wireshark capture file
>to
>an excel file?
>
>Thanks for the help.
>
>Cheers
>
>John