Ethereal-dev: Re: [ethereal-dev] no 64 bit support, gryphon plugin

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Steve Limkemann <stevelim@xxxxxxxxxx>
Date: Thu, 10 Aug 2000 14:25:29 -0400 (EDT)
On Thu, 10 Aug 2000, Guy Harris wrote:

> On Thu, Aug 10, 2000 at 10:46:16AM -0400, Steve Limkemann wrote:
> >   As stated, this 8 byte value is in tens of microseconds (seconds times
> > 100,000).  The lower 4 byte value is the standard Gryphon timestamp which
> > is dealt with correctly by converting ts.lng[0].
> 
> So what is the relationship between the 4-byte value and the 8-byte
> value?
> 
> Is the 8-byte value equal to the 4-byte value plus some constant?
> 
> If so, what is the constant?

  The lower 4 bytes of the 8 byte value is the 4 byte Gryphon timestamp in
tens of microseconds.  The upper 4 bytes of the 8 byte value is the
overflow for the lower 4 bytes.  Every 11 hours, 55 minutes and 49.67296
seconds the lower 4 bytes roll over from FFFF FFFF to 0000 0000 and the
upper 4 bytes increment by one.

  Stated another way, the 8 byte value is the number of seconds past
0:00:00 GMT Jan 1, 1970 times 100,000 plus the current fraction of a
second to 5 decimal places.  The lower 4 bytes of the 8 byte value are
used as the Gryphon timestamp.

  			Steve
---
Steve Limkemann
Dearborn Group
(248) 488-2080  ext. 322