tcpdump mailing list archives
Re: Tcpdump time discrepancy (vs ethereal/tcptrace)
From: Michael Richardson <mcr () sandelman ottawa on ca>
Date: Thu, 22 Jul 2004 21:21:36 -0400
-----BEGIN PGP SIGNED MESSAGE-----
"Guy" == Guy Harris <guy () alum mit edu> writes:
Guy> If that's still valid, we should probably have it set Guy> "thiszone" to "gmt2local(time stamp of first packet)" after Guy> reading, but before processing, the first packet, so the offset Guy> from UTC is appropriate to the time of the first packet, not to Guy> the time when tcpdump called "time()" in "gmt2local()". I think your analysis is right. - -- ] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [ ] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[ ] mcr () xelerance com http://www.sandelman.ottawa.on.ca/mcr/ |device driver[ ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Finger me for keys iQCVAwUBQQBoH4qHRg3pndX9AQH9cgP8DsjZNQcTWQWynkjEL0uSnkJoJI7fRBYB 2kZ/hHrfBEgRrfWGRShLH3G948Z5oFjTnkpYZeSjUQBF/5U1jB0bPpWjVQ+J6M3J prCkDD9mhLhenc5/i7pZcIP7lb2vyxs3Ds1U9oJuViuBfDsGRGGkRs2JiVqwqGvl DFSRMrf7r/c= =mMMg -----END PGP SIGNATURE----- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
Current thread:
- Tcpdump time discrepancy (vs ethereal/tcptrace) Aaron Mitchell (Jul 22)
- Re: Tcpdump time discrepancy (vs ethereal/tcptrace) Guy Harris (Jul 22)
- Re: Tcpdump time discrepancy (vs ethereal/tcptrace) Michael Richardson (Jul 22)
- Re: Tcpdump time discrepancy (vs ethereal/tcptrace) Guy Harris (Jul 23)
- Re: Tcpdump time discrepancy (vs ethereal/tcptrace) Michael Richardson (Jul 22)
- Re: Tcpdump time discrepancy (vs ethereal/tcptrace) Guy Harris (Jul 22)