Ethereal-dev: Re: [ethereal-dev] no 64 bit support, gryphon plugin

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Steve Limkemann <stevelim@xxxxxxxxxx>
Date: Thu, 10 Aug 2000 14:25:29 -0400 (EDT)
On Thu, 10 Aug 2000, Guy Harris wrote:

> On Thu, Aug 10, 2000 at 10:46:16AM -0400, Steve Limkemann wrote:
> >   As stated, this 8 byte value is in tens of microseconds (seconds times
> > 100,000).  The lower 4 byte value is the standard Gryphon timestamp which
> > is dealt with correctly by converting ts.lng[0].
> 
> So what is the relationship between the 4-byte value and the 8-byte
> value?
> 
> Is the 8-byte value equal to the 4-byte value plus some constant?
> 
> If so, what is the constant?

  The lower 4 bytes of the 8 byte value is the 4 byte Gryphon timestamp in
tens of microseconds.  The upper 4 bytes of the 8 byte value is the
overflow for the lower 4 bytes.  Every 11 hours, 55 minutes and 49.67296
seconds the lower 4 bytes roll over from FFFF FFFF to 0000 0000 and the
upper 4 bytes increment by one.

  Stated another way, the 8 byte value is the number of seconds past
0:00:00 GMT Jan 1, 1970 times 100,000 plus the current fraction of a
second to 5 decimal places.  The lower 4 bytes of the 8 byte value are
used as the Gryphon timestamp.

  			Steve
---
Steve Limkemann
Dearborn Group
(248) 488-2080  ext. 322