So I am very new to this so please be kind!
I've been looking around for how to extract the Timestamp from the wireless LAN management frame which is contained in a .cap file. The .cap contains information recorded using airodump and I think the wireless LAN management frame is a subset of a beacon frame (no idea if thats the right terms or context).
When I click on a frame in Wireshark it has a second 'pane' underneath that I can drill into and find the time-stamp I want. I would upload a picture but I need 60 points apparently. Its under:
IEE 802.11 wireless LAN management frame >> Fixed Parameters >> Timestamp.
I understand this is an EPOCH time/date and know how to convert it. What I don't know is how to extract it from each of the beacon frames. I have had a look at extracting packet bytes and dissections but I don't seem to be able to find a way to get the info I want. I got a .csv for instance and it seemed to list titles with no data.
I have read a couple of other forum posts and using tshark was mentioned but I am barely able to use Wireshark so didn't want to confuse myself further.
Could someone explain (as if to a simpleton) the best approach for grabbing this data consistently from the beacon frames? I would like to grab it to have a look at clock skew of wireless access points.