in reply to (cLive ;-)(Golf) Analyzing Time From tcpdump Output
in thread (Golf) Analyzing Time From tcpdump Output

Or
perl -lp0e's/\S*:(\S+).*:..:(\S+).*/$2-$1/es' data.output
TIMTOWTDI:
perl -lpe'$b=(split":")[2];$a||=$b}{$_=$b-$a' data.output

  p