如何打印从pcap文件读取的数据包的时间戳？

Question

I am trying to read the packets from a pcap file using ac program and print the time-stamp of each packet.

I am using the below line of code to print the timestamp:

printf("%s,",ctime((const time_t*)&header->ts.tv_sec));

And my output is as below:

Mon Jan 14 09:48:18 2013

How do I get it as YYYY-MM-DD HH:MM:SS like the one shown below?

2016-02-16 13:14:33.224487

I am new to c programming and have no clue what i am doing. Please help. Thanks!

Answer 1

You might like to have a look at localtime() and strftime() .

#define MYDATE_STR_MAX (<large enough> + 1)

...

  struct tm lt = localtime(header->ts.tv_sec);
  char st[MYDATE_STR_MAX];
  strftime(st, MYDATE_STR_MAX, <format specifier as per man-page here>, lt);
  /* use st here */

(include <time.h> on top)