I suppose we could get really ambitious and support strftime()-like formats ("strftime()-like" because, for relative times, you don't have any date fields, just time fields).
that would be a really nice idea - so we'd have essentially three distinct -t behaviours
1. print absolute timestamps 2. print relative (prev. packet) timestamps 3. print relative (first packet) timestamps plus a format code (is there a standard fmt code for usecs ?) for relative timestamps we'd need to print e.g. the number of months/years rather than the month/year abbrev itself ... /hannes - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
