Wireshark-users: Re: [Wireshark-users] How to export the captured frames' timestamps?
From: Ujjval Karihaloo <[email protected]>
Date: Wed, 13 May 2009 08:29:27 -0700
Dude you are so helpful!!!! - kudos to you!!!

Ujjval 


-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]
Sent: Wednesday, May 13, 2009 9:15 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] How to export the captured frames' timestamps?

Hi John,

TShark can do the job:
tshark -r beacon.pcap -R wlan.fc.type_subtype==0x08 -T fields -e frame.time
-E header=y > beacon.csv

Output:
frame.time
May 13, 2009 16:54:42.820083000
May 13, 2009 16:54:42.863314000
May 13, 2009 16:54:42.878562000
May 13, 2009 16:54:42.887561000

http://www.wireshark.org/docs/man-pages/tshark.html

Regards
Joan


On Wed, 13 May 2009 13:43:44 +0930 John Wang wrote

>I used Airpcap adapter and Wireshark to capture 802.11 beacon frames. I'm
>intresting about the beacon frames' timestamp. Does anyone know how can
I
>export all the captured frames's timestamp from an wireshark capture file
>to
>an excel file?
>
>Thanks for the help.
>
>Cheers
>
>John


       


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:[email protected]?subject=unsubscribe