0

When I tell tshark to decode a specifc protocol it will omit the timestamp of the packets.

For example, this line decodes all SSH packets in detail, but it won't show the timestamp when each packet was received:

tshark -O ssh

I tried with the option -t a, but it did nothing.

LatinSuD
  • 1,296

1 Answers1

0

Timestamps are fields of the frame virtual layer.

tshark -O frame,ssh
grawity
  • 501,077