Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You could make an Enhancement request for tshark to use recent.gui_time_precision:

# Timestamp display precision.
# One of: AUTO, SEC, DSEC, CSEC, MSEC, USEC, NSEC
gui.time_precision: SEC


Or another tshark command line option. Maybe --tp for timestamp precision.

You could make an Enhancement request for tshark to use recent.gui_time_precision:

# Timestamp display precision.
# One of: AUTO, SEC, DSEC, CSEC, MSEC, USEC, NSEC
gui.time_precision: SEC


Or another tshark command line option. Maybe --tp for timestamp precision.

Looks like there is precedent for tshark following gui preferences:
17132: Add optional timestamp to -x option in tshark

tshark -r [in.pcap] -o gui.column.format:"Time","%t" -t ad -P -x | text2pcap -t "%Y-%m-%d %H:%M:%S." - [out.pcap]