[pcap-ng-format] Issue #24: Need to specify the IDB if_tzone option format

Guy Harris guy at alum.mit.edu
Wed Aug 26 02:29:41 UTC 2015


On Aug 25, 2015, at 7:18 PM, Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:

> Why would it matter, if we specified the if_tzone was always in
> standard time? +8 hours = PST, no matter whether DST is in effect or
> not. The pcapng reading application can figure out if, for the given
> time in the timestamps and your standard timezone, DST is in effect or
> not for your timezone, can't it?

Yes, but if it's displaying the time stamps as local time for the zone in which they're collected, and that's *not* the zone in which you're running Wireshark, then knowing whether DST is in effect or not for *your* timezone is irrelevant - what's relevant is whether it's in effect *in the time zone in which the capture was done*.


More information about the pcap-ng-format mailing list