Ethereal-dev: RE: [Ethereal-dev] Ethereal 0.9.16 doesn't read AiroPeek 2.0 files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martijn Schipper" <mschipper@xxxxxxxxxxxxxxxxxxx>
Date: Fri, 6 Feb 2004 12:18:46 +0100
Hello Guy,

> But the time stamps look as if they're relative to the Windows
FILETIME 
> epoch, namely midnight, January 1, 1601.  I've checked in changes to 
> handle that; they appear to work, although there *might* be time zone 
> issues.

Good catch!!

According to
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/h
tml/frlrfsystemdatetimeclasstofiletimeutctopic.asp the time stamp is at
UTC.
This time is also with 100 nanoseconds increments! Does Airopeek also
use 100 nanoseconds time increments?

Best regards,
Martijn Schipper.


******************Legal Disclaimer**************************
"This email may contain confidential and privileged material for the sole use of the intended recipient.  Any unauthorized review, use or distribution by others is strictly prohibited.  If you have received the message in error, please advise the sender by reply email help@xxxxxxxxxxxxxxxxxxx, and delete the message. Thank you."
****************************************************************