https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1849
Guy Harris <guy@xxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |REOPENED
Resolution|FIXED |
Summary|tshark conversation output |tshark conversation output
|does not include date/time |does not include start
|information |date/time for the
| |conversation
OS/Version|Linux (other) |All
--- Comment #3 from Guy Harris <guy@xxxxxxxxxxxx> 2012-07-15 12:14:38 PDT ---
I don't think that's what he meant.
From
> It would be ideal for my usage if a date & time could be printed, probably via an optional switch, of the start of the socket pair for TCP or the first packet seen for UDP.
it sounds as if he wants, for each conversation in the "-z conv,{tcp,udp}"
output, a time stamp of the first packet (or, for TCP, perhaps the final
SYN+ACK - he doesn't indicate what "the start of the socket pair" means; is it
the initial SYN or the final SYN+ACK?). That's not currently produced.
The Wireshark conversation taps give a lot more columns, including a column
giving the time stamp, relative to the first packet in the capture, of the
first packet in the conversation.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.
