diff options
| author | Guy Harris <guy@alum.mit.edu> | 1999-03-01 22:59:47 +0000 |
|---|---|---|
| committer | Guy Harris <guy@alum.mit.edu> | 1999-03-01 22:59:47 +0000 |
| commit | e2b7e1aba956bda171fc111e66db7a84712b9ea2 (patch) | |
| tree | acb758504ab9fa21156edbde622ef0277a423aa6 /wiretap/README | |
| parent | 70451c547a09396841fbdc9c9acb4ac75aa2d88d (diff) | |
| download | wireshark-e2b7e1aba956bda171fc111e66db7a84712b9ea2.tar.gz | |
It turns out that the first of the unknown fields in the NetXRay header
appears to be the UNIX "time_t" when the capture started, so use that to
figure out the time when a packet was captured.
svn path=/trunk/; revision=204
Diffstat (limited to 'wiretap/README')
| -rw-r--r-- | wiretap/README | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/wiretap/README b/wiretap/README index e98c760e1b..db4972b39c 100644 --- a/wiretap/README +++ b/wiretap/README @@ -1,4 +1,4 @@ -$Id: README,v 1.12 1999/03/01 20:35:33 guy Exp $ +$Id: README,v 1.13 1999/03/01 22:59:47 guy Exp $ Wiretap is a library that is being developed as a future replacement for libpcap, the current standard Unix library for packet capturing. Libpcap is @@ -106,10 +106,9 @@ if possible). Sniffer Basic (NetXRay)/Windows Sniffer Pro ------------------------------------------- Network Associates' Sniffer Basic (formerly NetXRay from Cinco Networks) -file format is now partially supported; only Ethernet and Token Ring -captures can be read, and the packet time stamp isn't correctly -computed. Network Associates' Windows Sniffer Pro appears to use a -variant of that format; it's supported to the same extent. +file format is now supported, at least for Ethernet and token-ring. +Network Associates' Windows Sniffer Pro appears to use a variant of that +format; it's supported to the same extent. Gilbert Ramirez <gram@verdict.uthscsa.edu> Guy Harris <guy@netapp.com> |