Wireshark-users: [Wireshark-users] Timestamps for conversations
From: Jan Meier <janme7@xxxxxxxxxxxxxx>
Date: Wed, 5 May 2010 08:35:10 +0200
Hello fellow Wireshark-users,

Is there any known way to get time and date displayed in the Statistics -> "Conversations" -> tcp-table ? Or any other way to get the starts (end would be a bonus) of tcp conversations computed ?

Of course one can calculate with the relative beginning shown in the table and add that to the first packets timestamp in the capture file.

I also tried a couple of other tools like tshark, ngrep etc - but a conversations view of tcp connections with date/time (not relative) timestamps doesnt seem to be a usual use case.

Any help or advise is aprreciated.

Regards
Jan