Re: Tcpdump time discrepancy (vs ethereal/tcptrace)

[Michael Richardson <mcr () sandelman ottawa on ca>]

-----BEGIN PGP SIGNED MESSAGE-----


> > > > > "Guy" == Guy Harris <guy () alum mit edu> writes:
    Guy> If that's still valid, we should probably have it set
    Guy> "thiszone" to "gmt2local(time stamp of first packet)" after
    Guy> reading, but before processing, the first packet, so the offset
    Guy> from UTC is appropriate to the time of the first packet, not to
    Guy> the time when tcpdump called "time()" in "gmt2local()".

  I think your analysis is right.

- --
]     "Elmo went to the wrong fundraiser" - The Simpson         |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQQBoH4qHRg3pndX9AQH9cgP8DsjZNQcTWQWynkjEL0uSnkJoJI7fRBYB
2kZ/hHrfBEgRrfWGRShLH3G948Z5oFjTnkpYZeSjUQBF/5U1jB0bPpWjVQ+J6M3J
prCkDD9mhLhenc5/i7pZcIP7lb2vyxs3Ds1U9oJuViuBfDsGRGGkRs2JiVqwqGvl
DFSRMrf7r/c=
=mMMg
-----END PGP SIGNATURE-----
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.