From 9c1016a96575e097e1f1e77bd778d60bc9d538aa Mon Sep 17 00:00:00 2001 From: Guy Harris Date: Thu, 29 Feb 2024 18:23:40 -0800 Subject: [PATCH] pcap: mark the microseconds/nanoseconds field as unsigned. If you're tempted to stuff a negative number in there, srsly, don't do that. --- draft-ietf-opsawg-pcap.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/draft-ietf-opsawg-pcap.md b/draft-ietf-opsawg-pcap.md index aa2b4c6..09a4e41 100644 --- a/draft-ietf-opsawg-pcap.md +++ b/draft-ietf-opsawg-pcap.md @@ -230,8 +230,9 @@ Timestamp (Seconds) and Timestamp (Microseconds or nanoseconds): : seconds and fraction of a seconds values of a timestamp. : The seconds value is a 32-bit unsigned integer that represents the number of seconds that have elapsed since 1970-01-01 00:00:00 UTC, and -the microseconds or nanoseconds value represents the number of -microseconds or nanoseconds that have elapsed since that seconds. +the microseconds or nanoseconds value is a 32-bit unsigned value that +represents the number of microseconds or nanoseconds that have elapsed +since that seconds. : The Magic Number field in the File Header of a file indicates whether the values of the Timestamp (Microseconds or nanoseconds) fields of packets in that file are in units of microseconds or nanoseconds.