How convert wireless 802.11 timestamp (uptime) to human readable format in tshark or wireshark

  linux, python, tshark, wireshark

OS: Linux Debian – 64 bit

I searched but I couldn’t find a workable solution.

I want to convert timestamp of 802.11 wireless packets to human readable date/time (yyyy-mm-dd HH:MM:SS) format in tshark tool (save info and convert it with Python).

the value of timestamp is strange and it’s long: 15852672848228559939.

tshark -r test2.pcapng -Y "wlan.sa==3c:a0:67:2e:9b:6f and
(wlan.fc.type_subtype==5 or wlan.fc.type_subtype==8)" -E separator=’;’
-Tfields -e wlan.sa -e wlan.fixed.timestamp

[Output]:

MAC Address; Timestamp of WiFi access point (AP)

MAC Address; Timestamp of WiFi access point (AP)

MAC Address; Timestamp of WiFi access point (AP)

[For Test]:

you can use the info of last line. Also I attached a image and pcap file for better analysis.

image link: https://imgur.com/a/W3ltS91

pcap link: https://gofile.io/d/ZeWqGE

Source: Python Questions

LEAVE A COMMENT