Ask Your Question

Revision history [back]

Extracting RTP stats from pcap files using Tshark and using absolute timestamp in epoch

Is it possible to get the start and end time in absolute epoch? I am trying to process some pcap files I received from someone and trying to build a parser to convert this to CSV. However, my first step is to figure out how to get the timestamp in epoch. Thanks

> [email protected]:~/downloads# tshark -r
> call-from-other-tur-19may2022-1.pcap
> -q -z rtp,streams Running as user "root" and group "root". This could be
> dangerous.
> ========================= RTP Streams ========================    Start time      End time     Src IP addr  Port    Dest
> IP addr  Port       SSRC   
> Payload  Pkts         Lost   Min
> Delta(ms)  Mean Delta(ms)   Max
> Delta(ms)  Min Jitter(ms) Mean
> Jitter(ms)  Max Jitter(ms) P          
> roblems?
>      1.681994     17.526699    172.16.0.245 12000    219.34.96.55 12010 0x57C314A9            g711A  
> 793     0 (0.0%)          19.090      
> 20.006          25.106           0.052           0.191           0.511
>      1.679413     17.518439    219.34.96.55 12010    172.16.0.245 12000 0x726160A7            g711A  
> 793     0 (0.0%)          18.989      
> 19.999          24.241           0.001           0.312           0.564
> ==============================================================

Extracting RTP stats from pcap files using Tshark and using absolute timestamp in epoch

Is it possible to get the start and end time in absolute epoch? I am trying to process some pcap files I received from someone and trying to build a parser to convert this to CSV. However, my first step is to figure out how to get the timestamp in epoch. Thanks

> [email protected]:~/downloads# tshark -r
> call-from-other-tur-19may2022-1.pcap
> -r call-from-other-tur-19may2022-1.pcap -q -z rtp,streams rtp,streams
Running as user "root" and group "root". This could be
> be dangerous.
> ========================= RTP Streams ========================    ========================
Start time  End time   Src IP addr  Port    Dest
> Dest IP addr  Port   SSRC   
>  Payload  Pkts  Lost   Min
>   Min Delta(ms)  Mean Delta(ms)   Max
> Max Delta(ms)  Min Jitter(ms) Mean
> Mean Jitter(ms)  Max Jitter(ms) P          
> roblems?
>      Problems?
1.681994    17.526699  172.16.0.245 12000  219.34.96.55 12010 0x57C314A9  g711A  
>  793   0 (0.0%)  19.090      
>  20.006          25.106         0.052           0.191           0.511
>      1.679413    17.518439  219.34.96.55 12010  172.16.0.245 12000 0x726160A7  g711A  
>  793   0 (0.0%)  18.989      
>  19.999          24.241         0.001           0.312           0.564
> ==============================================================