On Mar 23, 2004, at 1:36 PM, Stephen Donnelly wrote:
Might be nice to support different time-stamp formats officially somehow, e.g. AIX's nanosecond resolution timespec.
Do we need arbitrary formats, or just seconds plus fractions of seconds?
We could either make the time stamp format per-interface or per-file; doing the latter means that merging captures (as opposed to concatenating captures, as the "file header" record would specify the time stamp format of all subsequent packets until the next "file header" record) would require that we choose the highest-resolution format and convert time stamps in other formats to that format.
We might also want the "file header" record to contain a capture start time (some other capture formats do) and perhaps that time represented as YYYY/MM/DD/HH/MM/SS.SSSS... - or perhaps the time zone name in, say, "Arthur Olson" format, in case somebody wants to know what time a packet arrived in local time on the machine on which the capture was done.
- This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]
