The Timestamp class defines how Timestamps appear in libpcap files.

Header Definition

 Symbol  :endian  Default: :little
 Int32   :sec
 Int32   :usec
Methods
I
N
R
T
Included Modules
Class Public methods
new(args={})

Source: show 

# File lib/packetfu/pcap.rb, line 109
                def initialize(args={})
                        set_endianness(args[:endian] ||= :little)
                        init_fields(args)
                        super(args[:endian], args[:sec], args[:usec])
                end
Instance Public methods
init_fields(args={})

Called by initialize to set the initial fields.

Source: show 

# File lib/packetfu/pcap.rb, line 116
                def init_fields(args={})
                        args[:sec] = @int32.new(args[:sec])
                        args[:usec] = @int32.new(args[:usec])
                        return args
                end
read(str)

Reads a string to populate the object.

Source: show 

# File lib/packetfu/pcap.rb, line 128
                def read(str)
                        force_binary(str)
                        return self if str.nil?
                        self[:sec].read str[0,4]
                        self[:usec].read str[4,4]
                        self
                end
to_s()

Returns the object in string form.

Source: show 

# File lib/packetfu/pcap.rb, line 123
                def to_s
                        self.to_a[1,2].map {|x| x.to_s}.join
                end