Wireshark · Ethereal-dev: Re: [Ethereal-dev] timestamp resolution

[Hamish Moffatt <hamish@xxxxxxxxxxxx>]

On Mon, Jan 21, 2002 at 01:50:53PM -0800, Guy Harris wrote:
> > Which file format could we save these in? I guess we are not
> > really free to create new variants of the pcap format.
> 
> I wasn't thinking of *saving* them with nanosecond resolution; I was
> just thinking of supporting *reading* capture files with nanosecond
> resolution without cutting it back to microsecond resolution.

It seemed to me that none of the current capture file format supported
by wiretap have sub-microsecond resolution anyway, so we don't have
anything we can read that uses the better internal resolution.


On the text2pcap timestamp bug, my colleague and I agreed that
having the year default to 1970 is probably the best bet.
When seen in the decode view, it's obviously wrong; the
current time/date (at conversion time) may not be obviously
wrong later. So here's the patch as I posted it last night.

cheers,
Hamish
-- 
Hamish Moffatt VK3SB <hamish@xxxxxxxxxx> <hamish@xxxxxxxxxxxx>

Index: text2pcap.c
===================================================================
RCS file: /cvsroot/ethereal/text2pcap.c,v
retrieving revision 1.10
diff -r1.10 text2pcap.c
655a656
>         timecode.tm_year = 70;