This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,
I would like to capture an put a time stamp at the beginning of MPDU or before MPDU starts. Can anybody help me regarding this. Thanks you in advance, Best Regards, Amin

asked 30 May '11, 07:22

AminGho's gravatar image

AminGho
51448
accept rate: 0%

Are you looking for radiotap.mactime?

$ tshark -i 1 -T fields -e frame.number -e radiotap.mactime
Capturing on AirPcap USB wireless capture adapter nr. 00
1       52586108
2       52669071
3       52673115
(03 Jun '11, 13:14) joke

Timestamps are retrieved from the libpcap/winpcap library, which in turn get the timestamp from the OS kernel.

This may be oversimplified for what you actually need but...

if you are using tshark you could use:

tshark -i (interface#) -T fields -e frame.time -e (whatever other fields you want to display)

For capturing, time stamp is already included in every packet, but you can output different formats using parameters as follows:

tshark -i (interface#) -t ad (absolute date and time) or -t a (absolute time) or -t r (relative time between 1st and current packet) or -t d (delta from previous packet) or -t dd (displayed delta) or -t e (epoch time since 1/1/1970).

Hope this is helpful,

John

permanent link

answered 02 Jun '11, 06:33

John_Modlin's gravatar image

John_Modlin
1205
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×157
×76
×62
×3

question asked: 30 May '11, 07:22

question was seen: 4,550 times

last updated: 03 Jun '11, 13:15

p​o​w​e​r​e​d by O​S​Q​A