Wireshark mailing list archives

Pidl patch for ABSOLUTE_TIMEs


From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Sat, 24 Apr 2010 15:07:52 -0400

Hello,

The Wireshark Wiki page:

http://wiki.wireshark.org/Pidl

says to send patches against Pidl to this address.

Pidl generates some Wireshark dissector fields of type
FT_ABSOLUTE_TIME.  Starting some time not too long ago, these fields
need a 'display' field other than BASE_NONE or BASE_DEC.  The attached
patch fixes this, *assuming* that all the times are "local."  Other
options include:

        ABSOLUTE_TIME_UTC,      /* UTC, with month and day */
        ABSOLUTE_TIME_DOY_UTC   /* UTC, with 1-origin day-of-year */

For now (to keep Wireshark running) I've modified the dcerpc-lsa
dissector manually; this is my attempt to push the patch upstream.

Regards,
-Jeff

Attachment: pidl.patch
Description:

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: