Wireshark-dev: Re: [Wireshark-dev] getting the time
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 21 Jan 2010 11:47:09 -0800
On Jan 21, 2010, at 11:25 AM, Brian Oleksa wrote:

> It is a pointer into the data that I have constructed based on the data 
> in the packet.

So what do you have to do to the raw data in the packet to construct that buffer?