tshark display filter / time

[Stuart Kendrick <skendric () fhcrc org>]

How do I persuade tshark to display both Relative Time and Delta Time?

Obviously, 'time.delta' and 'time.relative' don't mean much ...

guru> tshark -r sample.pcap -T fields -e frame.number -e time.delta -e time.relative -e ip.src -e ip.dst

frame.number  time.delta  time.relative  ip.src         ip.dst
1                                        10.12.5.123    10.12.18.116
2                                        10.12.18.116   10.12.5.123
3                                        10.12.5.123    10.12.18.116
4                                        10.12.18.116   10.12.5.123

--sk

Stuart Kendrick
FHCRC

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe