[pcap-ng-format] Multiple capture start and end times for an interface?

Guy Harris guy at alum.mit.edu
Wed Aug 26 21:21:52 UTC 2015


What does it mean if there are multiple Interface Statistics Blocks with isb_starttime or isb_endtime values? Should the first isb_starttime value seen be treated as the actual start time and the last isb_endtime value seen be treated as the actual end time?


More information about the pcap-ng-format mailing list