Paolo Abeni wrote:
the attached patch fix an off by one in current usb sniffing code. It also substitute the kernel-provided timestamp with gettimeofday. The kernel provided timestamp use 32 bits to represent a struct timeval (8 bits for tv_sec and 24 for tv_usec), so it's content is quite misleading.
8 bits for tv_sec? Yes, it's somewhat misleading to assert that the world ended at 00:04:16 GMT on January 1, 1970. :-)
(Well, actually, with 24 bits for tv_usec, it would *almost* be 00:04:17.) Checked in. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.