Control timestamp display

Tcpdump provides abundant options to control timestamp display:
































Option Meaning Example
-t No time stamp for each line. IP 192.168.35.211.ssh > 10.217.133.114.64998: Flags [P.], seq 108:144, ack 1, win 317, length 36
-tt Unix style, i.e., seconds and fractions of second since January 1, 1970, 00:00:00, UTC. 1561024104.790056 IP 192.168.35.211.ssh > 10.217.133.114.64998: Flags [P.], seq 493732:494000, ack 181, win 317, length 268
-ttt Show time delta between current and previous line on each dump line. The default is microsecond resolution. 00:00:00.000320 IP 192.168.35.211.ssh > 10.217.133.114.65401: Flags [P.], seq 108:144, ack 1, win 317, length 36
-tttt Print detailed timestamp of every packet. 2019-06-20 18:16:07.208973 IP 192.168.35.211.ssh > 10.217.133.114.65401: Flags [P.], seq 1528425705:1528425813, ack 3085
343628, win 317, length 108
-ttttt Show time delta between current and first line on each dump line. The default is microsecond resolution. 00:00:00.000513 IP 192.168.35.211.ssh > 10.217.133.114.65401: Flags [P.], seq 260:296, ack 1, win 317, length 36