Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Tshark frame.time format


I trying to get the output of the frame.time in a format like 2020-01-01 12:01:01, but I cannot seem to find out how to do that.

I am using a command like

tshark -r 0001.pcap -T fields -e frame.time -e ip.src -e ip.dst

Current result is

May 20, 2020 12:01:01.000000001 [ip] [ip]

but what I want is

2020-05-20 12:01:01.000000001 [ip] [ip]

How do I do that???