http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=33608
User: guy
Date: 2010/07/21 09:27 AM
Log:
Pick up revision from the trunk:
r33607 | guy | 2010-07-21 09:25:59 -0700 (Wed, 21 Jul 2010) | 7 lines
According to mail from Paul Long at Microsoft, in the 1.x NetMon file
format, the time offset from the start of the capture always had a
positive value, so it's an unsigned value. (In newer versions of NetMon
3.x, the capture can start before the "capture start" time stamp is set,
so packets can have a *negative* offset from the capture start time
stamp. Those captures are in the 2.x file format.)
Directory: /trunk-1.4/wiretap/
Changes Path Action
+7 -1 netmon.c Modified