 | 1 | initial version |
Looks like you could do it with a lua script.
WSDG 12.11.5.5. frameinfo.time:
12.11.5.5. frameinfo.time
Mode: Retrieve or assign.
The packet timestamp as an NSTime object.
Note: Set the FileHandler.time_precision to the appropriate wtap_file_tsprec value as well.
FileHandler and FrameInfo examples in Wiki/Lua/Examples A pcap FileShark script
Would take a pass to extract the timestamps and store to file or perhaps a lua table.
Then reopen the file in Frame mode and update the timestamps.
(sample capture erspan_type_III.cap attached to 13400: Improve CISCO ERSPAN Dissector)
Here is a script that reads a text file with list of packets to filter/keep:
using tshark with huge display filters
If the timestamps are stored in an ASCII file could read them in similar to reading packet list above.
| | 2 | No.2 Revision |
Looks like you could do it with a lua script.
WSDG 12.11.5.5. frameinfo.time:
12.11.5.5. frameinfo.time
Mode: Retrieve or assign.
The packet timestamp as an NSTime object.
Note: Set the FileHandler.time_precision to the appropriate wtap_file_tsprec value as well.
FileHandler and FrameInfo examples in Wiki/Lua/Examples A pcap FileShark script
Would take a pass to extract the timestamps and store to file or perhaps a lua table.
Then reopen the file in Frame mode and update the timestamps.
(sample capture erspan_type_III.cap attached to 13400: Improve CISCO ERSPAN Dissector)
Here is a script that reads a text file with list of packets to filter/keep:
using tshark with huge display filters
If the timestamps are stored in an ASCII file could read them in similar to reading packet list above.
(Timestamps more uniform in 5244: Add Dissector for ERSPAN Type-III Header pcap)
