Guy Harris wrote:
Hannes Gredler wrote:
found the openBSD tcpdump tree meanwhile ...
have added the desired functionality to HEAD.
Do we want relative time stamps (-ttt, for secs/usecs since previous
packet, and -ttttt, for secs/usecs since first packet) to be printed as
HH:MM:SS.UUUUUU, or seconds.UUUUUU?
in the sense of having an indicator wether this is a relative/or absolute
timestamp ?
The original "-ttt" was, I think, clearly broken, as no decimal point
was printed if the delta was less than 1 second, and a space was printed
after the decimal point if the delta was >= 1 second, so fixing that is
definitely right.
OpenBSD prints them as seconds.UUUUUU, rather than HH:MM:SS.UUUUUU.
saw that and i deliberatly decided against it i.e.
to print HH:MM:SS.UUUUUU as it IMHO makes things easier to read for
long-term traces ...
/hannes
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
