Wireshark · Wireshark-users: Re: [Wireshark-users] How to export the captured frames' timestamps?

[John Wang <locationdev@xxxxxxxxx>]

Hi Joan,

Thank you. The Tshark is working very well now.

Cheers

John

20a09/5/1n4 Ujjvakl Karihaloo <ujjval@xxxxxxxxxxxxxxxx>

Dude you are so helpful!!!! - kudos to you!!!

Ujjval

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of j.snelders@xxxxxxxxxx
Sent: Wednesday, May 13, 2009 9:15 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] How to export the captured frames' timestamps?

Hi John,

TShark can do the job:
tshark -r beacon.pcap -R wlan.fc.type_subtype==0x08 -T fields -e frame.time
-E header=y > beacon.csv

Output:
frame.time
May 13, 2009 16:54:42.820083000
May 13, 2009 16:54:42.863314000
May 13, 2009 16:54:42.878562000
May 13, 2009 16:54:42.887561000

http://www.wireshark.org/docs/man-pages/tshark.html

Regards
Joan


On Wed, 13 May 2009 13:43:44 +0930 John Wang wrote

>I used Airpcap adapter and Wireshark to capture 802.11 beacon frames. I'm
>intresting about the beacon frames' timestamp. Does anyone know how can
I
>export all the captured frames's timestamp from an wireshark capture file
>to
>an excel file?
>
>Thanks for the help.
>
>Cheers
>
>John





___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe