 | 1 | initial version |
Hi
I like using the frame.time field for this.
You should see this field under Frame in the Packet details pane if your capture has Ethernet frames in it.
You can see packets for certain times using these filters:
Packets received ON or AFTER December 28, 2018 16:45:
frame.time >= "Dec 28, 2018 16:45:00.000000000"
Packets received BETWEEN 16:45 and 17:45 on December 28, 2018:
(frame.time >= "Dec 28, 2018 16:45:00.000000000" ) && (frame.time <= "Dec 28, 2018 17:45:00.000000000")
Hopefully you know what the time was on the capture device (precision, timezone, etc.) because that is the time used for that field.
Cheers,
JFD