[Wireshark-users] how to extract only time stamp from captured file

2007-05-22 Thread Korn Vajanapoom
Hi,

How could I extract the time stamp information from a captured file (which 
is big  more than ten thousand entries) ?
I want to use these numbers for a latency calculation.

Thanks.


___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users


Re: [Wireshark-users] how to extract only time stamp from captured file

2007-05-22 Thread Sake Blok
On Tue, May 22, 2007 at 02:37:08AM -0400, Korn Vajanapoom wrote:
 
 How could I extract the time stamp information from a captured file (which 
 is big  more than ten thousand entries) ?
 I want to use these numbers for a latency calculation.

If you use a recent automated build available on 
http://www.wireshark.org/download/automated/ then 
you can use tshark to do what you want. Have a look
at the fields option to -T. The following might be
what you are looking for:

tshark -T fields -e frame.time_relative -r file

Which produces something like:

0.0
0.036742000
0.056315000
0.061832000
0.086826000
0.088054000
0.104018000
0.104056000
0.104201000
0.130275000
0.151761000

Hope this helps,  Cheers,


Sake
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users