Ethereal-dev: Re: [Ethereal-dev] Question: wiretap, timestamps and timezone

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 18 Apr 2004 12:58:11 -0700
On Sun, Apr 18, 2004 at 09:39:52AM +0200, Rolf Fiedler wrote:
> I have a question regarding the proper use of the wiretap library. In
> the wth->phdr->ts.tv_sec field, is that a timestamp in GMT

Yes.  They're UNIX-style time stamps.

> I have traces that have timestamps in GMT (to allow use across
> timezones) that are not displayed properly

If so, then any capture done by Ethereal itself will not have its
timestamps displayed properly - libpcap format has UNIX-style time
stamps.