-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Guy" == Guy Harris <[EMAIL PROTECTED]> writes: Guy> If that's still valid, we should probably have it set Guy> "thiszone" to "gmt2local(time stamp of first packet)" after Guy> reading, but before processing, the first packet, so the offset Guy> from UTC is appropriate to the time of the first packet, not to Guy> the time when tcpdump called "time()" in "gmt2local()". I think your analysis is right. - -- ] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [ ] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[ ] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/mcr/ |device driver[ ] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Finger me for keys iQCVAwUBQQBoH4qHRg3pndX9AQH9cgP8DsjZNQcTWQWynkjEL0uSnkJoJI7fRBYB 2kZ/hHrfBEgRrfWGRShLH3G948Z5oFjTnkpYZeSjUQBF/5U1jB0bPpWjVQ+J6M3J prCkDD9mhLhenc5/i7pZcIP7lb2vyxs3Ds1U9oJuViuBfDsGRGGkRs2JiVqwqGvl DFSRMrf7r/c= =mMMg -----END PGP SIGNATURE----- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.