On Tue, May 22, 2007 at 02:37:08AM -0400, Korn Vajanapoom wrote: > > How could I extract the time stamp information from a captured file (which > is big .... more than ten thousand entries) ? > I want to use these numbers for a latency calculation.
If you use a recent automated build available on http://www.wireshark.org/download/automated/ then you can use tshark to do what you want. Have a look at the "fields" option to -T. The following might be what you are looking for: tshark -T fields -e frame.time_relative -r <file> Which produces something like: 0.000000000 0.036742000 0.056315000 0.061832000 0.086826000 0.088054000 0.104018000 0.104056000 0.104201000 0.130275000 0.151761000 Hope this helps, Cheers, Sake _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
