Wireshark · Ethereal-dev: Re: [Ethereal-dev] Time codes for text2pcap?

["Gordon McKinney" <gordon@xxxxxxxxxxxxx>]

I understand those constraints, the other possibility is you ignore the date
stamp totally as most traces only need the deltas for anaylsis. A directive
would probably be better i.e.

 -t 0     = No Date (Default)
 -t 1     = Ansi (yyyy-mm-dd)
 -t 2     = US (mm-dd-yyyy)
 -t 3     = UK (dd-mm-yyyy)

Time format:  hh-mm-ss-ms

With separators being any non numeric character.

Ultimately I would be happy with no date if it is easier.

In anycase would it be something I should undertake or is there an owner of
this module?

If not then I will have a go at adding the code necessary and send the
updated files to the maling list.

--
Gordon McKinney
http://www.night-ray.com
Mobile +44 (0)7770-957 627

----- Original Message -----
From: "Guy Harris" <gharris@xxxxxxxxx>
To: "Gordon McKinney" <gordon@xxxxxxxxxxxxx>
Cc: <ethereal-dev@xxxxxxxxxxxx>
Sent: Sunday, November 18, 2001 9:48 PM
Subject: Re: [Ethereal-dev] Time codes for text2pcap?


> On Sun, Nov 18, 2001 at 09:42:57PM -0000, Gordon McKinney wrote:
> > Is it easy for someone to add the timecodes to the text2pcap program
>
> Probably not.
>
> For one thing, there's no single format for date/time stamps used in all
> textual dumps of packet data, so you'd either have to add heuristics or
> add explicit directives telling text2pcap what the format of the
> date/time stamp is.  (Note that "format" would include an indication of
> the order in which the year, month, and day appear; this suggests that
> heuristics alone couldn't do the job - what day is 12/06/2001?  In many
> places, it's June 12th; in some other places, it's December 6.)
>