On Mon, Jan 21, 2002 at 01:50:53PM -0800, Guy Harris wrote: > > Which file format could we save these in? I guess we are not > > really free to create new variants of the pcap format. > > I wasn't thinking of *saving* them with nanosecond resolution; I was > just thinking of supporting *reading* capture files with nanosecond > resolution without cutting it back to microsecond resolution.
It seemed to me that none of the current capture file format supported by wiretap have sub-microsecond resolution anyway, so we don't have anything we can read that uses the better internal resolution. On the text2pcap timestamp bug, my colleague and I agreed that having the year default to 1970 is probably the best bet. When seen in the decode view, it's obviously wrong; the current time/date (at conversion time) may not be obviously wrong later. So here's the patch as I posted it last night. cheers, Hamish -- Hamish Moffatt VK3SB <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Index: text2pcap.c =================================================================== RCS file: /cvsroot/ethereal/text2pcap.c,v retrieving revision 1.10 diff -r1.10 text2pcap.c 655a656 > timecode.tm_year = 70;
