Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'origin/topic/johanna/default-canonifier-only-first-timestamp'

Browse source 
* origin/topic/johanna/default-canonifier-only-first-timestamp:
  Default canonifier change to only remove first timestamp in line
  Align SMB timestamp calculation between operating systems
This commit is contained in:
Johanna Amann 2025-06-24 14:00:39 +01:00
commit 72bd683c23
97 changed files with 740 additions and 714 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/analyzer/protocol/smb/smb-time.pac
View file

@ -11,7 +11,7 @@ double filetime2zeektime(uint64_t ts)
{
// Zeek can't support times back to the 1600's
// so we subtract a lot of seconds.
return (ts / 10000000.0L) - 11644473600.0L;
return (static_cast<double>(ts) / 10000000.0) - 11644473600.0;
}
double time_from_lanman(SMB_time* t, SMB_date* d, uint16_t tz)