How to filter Packets by Time

retag add tags

hello, i tryed this frame.time >= "Mar 1, 2023 4:22:00 PM" && frame.time <= "Mar 1, 2023 4:24:00 PM" filter, but it dosn't worked

If you look at the Wireshark filter manual page you'll find:

Date and time values can be given in ISO 8601 format or using a legacy month-year-time format:

"2020-07-04T12:34:56"
"Sep 26, 2004 23:18:04.954975"

The 'T' separator in ISO 8601 can be omitted. ISO 8601 supports timezone designators as UTC or an offset from UTC. Legacy formats can append the value "UTC" at the end to specify time in Coordinated Universal Time. Otherwise date and time values are interpreted as local time.

13.7k

Jaap

answered 2023-03-06 07:00:31 +0000

edit flag offensive 0 remove flag delete link

Comments

Look in the WSUG for places to do Apply as Filter.
This will add the field with the current value which will be an example of the format required.

Chuckc (2023-03-06 15:19:16 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

How to filter Packets by Time edit

Comments

1 Answer

Comments