Re: Request for new pcap/pcapng DLT Format

[Guy Harris <guy () alum mit edu>]

On May 13, 2013, at 1:04 PM, chris_bontje () selinc com wrote:

> 1) The relative timestamp is 8 bytes, the "left" and "right" components 
> are 32-bit integers representing the left and right-hand side of the 
> decimal point, respectively

Seconds and 1/2^32ths of a second?

Speaking of timestamps, what goes into the pcap or pcap-ng time stamp field (those are absolute timestamps)?
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers