 | 1 | initial version |
You would need to adjust the syntax to read from the columns (pinfo.cols.info) (See 11.5.3.3. Example) but even then it only seems to work with text columns like protocol and info.
Can you get what you need from the frame protocol fields such as frame.time or frame.time_epoch?
| | 2 | No.2 Revision |
The Pinfo names are abs_ts, rel_ts, delta_ts and delta_dis_ts.
print ("When the packet was captured.", pinfo.abs_ts)
print ("Number of seconds passed since beginning of capture.", pinfo.rel_ts)
print ("Number of seconds passed since the last captured packet.", pinfo.delta_ts)
print ("Number of seconds passed since the last displayed packet.", pinfo.delta_dis_ts)
(Leaving this original part of the answer for future reference about reading columns)
You would need to adjust the syntax to read from the columns (pinfo.cols.info) (See 11.5.3.3. Example) but even then it only seems to work with text columns like protocol and info.
Can you get what you need from the frame protocol fields such as frame.time or frame.time_epoch?
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.