Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: [Ethereal-users] format of the time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jonathan Lynch <jlynch@xxxxxxxxxxxxxxxxxx>
Date: Thu, 30 Jun 2005 13:05:36 +0100
I capture packets to pcap file with the following command. 

tethereal proto 17 and dst port 13666 -w mylog.pcap

I process this output and only print out the values that I require.

tethereal -z "proto,colinfo,ip.id,ip.id" -o "column.format: time, %At,
Proto, %p, Info, %i" -r mylog.pcap

Sample output is 
11:32:00.908040 UDP Source port: 21360  Destination port: 13666  ip.id
== 0x0000

I am printing out the absolute time. 

Is there any way that I can get tethereal to print out the time in
seconds since the epoch ??

I presume tethereal uses gettimeofday and can processes the timeval
structure. I want to be able to scan the time into a timeval structure
using a C program. 

I would appreciate if anyone could answer my question

Jonathan Lynch