my problem is, I need to get the timestamp/timings of the packet for certain measurement. I saw perl code in some forums to retrieve timings for real time captures. any suggestions for offline..?
Packets either have the information or they don't, if they have it, you can retrieve it
See pcapdump, pcapinfo, http://search.cpan.org/grep?cpanid=SAPER&release=Net-Pcap-0.17&string=sec&i=1&n=1&C=0#t/06-offline.t/http://search.cpan.org/dist/Net-Pcap/MANIFEST Net::Pcap::Easy (esp the localtime), Net::Pcap::Reassemble