diff options
| author | Bill Meier <wmeier@newsguy.com> | 2015-01-19 15:32:45 -0500 |
|---|---|---|
| committer | Bill Meier <wmeier@newsguy.com> | 2015-01-19 20:51:14 +0000 |
| commit | 5fa13c6a1923e2e3cb7c712c845248207decb1e5 (patch) | |
| tree | a5a7ec2c8d53f81ade732993d6ecfce5ce3af605 /doc | |
| parent | 7a81add848378117b5dd7759f83c2c3c72befaa7 (diff) | |
README.dissector: Minor update re date/time display.
Change-Id: Iae467efeccd2e51ea66aab029100c958de7d374e
Reviewed-on: https://code.wireshark.org/review/6662
Reviewed-by: Bill Meier <wmeier@newsguy.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/README.dissector | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/doc/README.dissector b/doc/README.dissector index 501f2afa35..fabf5b96e5 100644 --- a/doc/README.dissector +++ b/doc/README.dissector @@ -812,8 +812,8 @@ wide the parent bitfield is. For FT_ABSOLUTE_TIME fields, 'display' is used to indicate whether the time is to be displayed as a time in the time zone for the machine on which Wireshark/TShark is running or as UTC and, for UTC, whether the -date should be displayed as "{monthname}, {month} {day_of_month}, -{year}" or as "{year/day_of_year}". +date should be displayed as "{monthname} {day_of_month}, {year}" or as +"{year/day_of_year}". Additionally, BASE_NONE is used for 'display' as a NULL-value. That is, for non-integers other than FT_ABSOLUTE_TIME fields, and non-bitfield @@ -1447,6 +1447,7 @@ encodings that are currently supported are: ENC_TIME_TIMESPEC - seconds (4 bytes) and nanoseconds (4 bytes) of time since January 1, 1970, midnight UTC. + (If the field length is 4, then nanosecs is defaulted to 0). ENC_TIME_NTP - an NTP timestamp, represented as a 64-bit unsigned fixed-point number, in seconds relative to 0h |