Ethereal-dev: Re: [Ethereal-dev] source code for observer file format

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 31 Oct 2003 00:06:32 -0800
On Thu, Oct 30, 2003 at 04:50:27PM -0800, Guy Harris wrote:
> Checked in, with fixes to handle the byte-order and C++-comment issues, 

Unfortunately, another issue came up - not all platforms have
"tm_gmtoff" in a "struct tm".  The code failed to compile with MSVC++ on
NT 4.0 and the headers that I have.

I've temporarily removed the "struct tm" from "struct observer_time",
and "#if 0"ed out the code that refers to it.

Is the nanoseconds-since-midnight-2000-01-01 value in the packet entry
header nanoseconds since midnight *local* time, or nanoseconds since
midnight *UTC*?  If the latter, we don't need the local time zone
offset.  If the former, however, we'd need to compute the time zone
offset between local time and GMT at midnight local time on Jan 1, 2000,
and use that to adjust the time.