I'm looking at a trace (CSV) file formatted by TRACERPT. This shows a
heading that includes an entry labeled "clock-time", and heads a
column of 18-digit numbers. I'm unable to figure out how to convert
this number to the actual clock time. Can anybody help, please? For
what it's worth, the trace was started 26 Feb 2007 4:25:38.625.

Thanks in advance.

Sample:

Event Name, Type, TID, Clock-Time, Kernel(ms),
User(ms), User Data
EventTrace, Header, 0x0E28, 128169375386250000,
0, 0, 4096, 65797...
HWConfig, CPU, 0x0E28, 128169375386250000,
0, 0, 2327, 2...
HWConfig, 14, 0x0E28, 128169375386250000,
0,...

hazarding a guess that the "12816937538" is the number of seconds from
"time zero". Time started about Jan 1, 1600.

bxf wrote:

> I'm looking at a trace (CSV) file formatted by TRACERPT. This shows a
> heading that includes an entry labeled "clock-time", and heads a
> column of 18-digit numbers. I'm unable to figure out how to convert
> this number to the actual clock time. Can anybody help, please? For
> what it's worth, the trace was started 26 Feb 2007 4:25:38.625.
>
> Thanks in advance.
>
> Sample:
>
> Event Name, Type, TID, Clock-Time, Kernel(ms),
> User(ms), User Data
> EventTrace, Header, 0x0E28, 128169375386250000,
> 0, 0, 4096, 65797...
> HWConfig, CPU, 0x0E28, 128169375386250000,
> 0, 0, 2327, 2...
> HWConfig, 14, 0x0E28, 128169375386250000,
> 0,...
>

On Feb 27, 3:50 pm, Bob I <bire...******.com> wrote:
> hazarding a guess that the "12816937538" is the number of seconds from
> "time zero". Time started about Jan 1, 1600.
>
> bxfwrote:
> > I'm looking at a trace (CSV) file formatted by TRACERPT. This shows a
> > heading that includes an entry labeled "clock-time", and heads a
> > column of 18-digit numbers. I'm unable to figure out how to convert
> > this number to the actual clock time. Can anybody help, please? For
> > what it's worth, the trace was started 26 Feb 2007 4:25:38.625.
>
> > Thanks in advance.
>
> > Sample:
>
> > Event Name, Type, TID, Clock-Time, Kernel(ms),
> > User(ms), User Data
> > EventTrace, Header, 0x0E28, 128169375386250000,
> > 0, 0, 4096, 65797...
> > HWConfig, CPU, 0x0E28, 128169375386250000,
> > 0, 0, 2327, 2...
> > HWConfig, 14, 0x0E28, 128169375386250000,
> > 0,...

Yeah, I thought of something like that, except I had no awareness of
anything hat should make me focus on the year 1600. Now I just need to
convert the numbers to the actual times of day...

bxf wrote:

> On Feb 27, 3:50 pm, Bob I <bire...******.com> wrote:
>
>>hazarding a guess that the "12816937538" is the number of seconds from
>>"time zero". Time started about Jan 1, 1600.
>>
>>bxfwrote:
>>
>>>I'm looking at a trace (CSV) file formatted by TRACERPT. This shows a
>>>heading that includes an entry labeled "clock-time", and heads a
>>>column of 18-digit numbers. I'm unable to figure out how to convert
>>>this number to the actual clock time. Can anybody help, please? For
>>>what it's worth, the trace was started 26 Feb 2007 4:25:38.625.
>>
>>>Thanks in advance.
>>
>>>Sample:
>>
>>>Event Name, Type, TID, Clock-Time, Kernel(ms),
>>>User(ms), User Data
>>> EventTrace, Header, 0x0E28, 128169375386250000,
>>>0, 0, 4096, 65797...
>>> HWConfig, CPU, 0x0E28, 128169375386250000,
>>>0, 0, 2327, 2...
>>> HWConfig, 14, 0x0E28, 128169375386250000,
>>>0,...
>
>
> Yeah, I thought of something like that, except I had no awareness of
> anything hat should make me focus on the year 1600. Now I just need to
> convert the numbers to the actual times of day...
>

Probably easiest would be to divide by 10 million to get seconds and
then subtract a set amount to make the remaining number become a serial
date/time in Excel.

On Feb 27, 6:37 pm, Bob I <bire...******.com> wrote:
> bxfwrote:
> > On Feb 27, 3:50 pm, Bob I <bire...******.com> wrote:
>
> >>hazarding a guess that the "12816937538" is the number of seconds from
> >>"time zero". Time started about Jan 1, 1600.
>
> >>bxfwrote:
>
> >>>I'm looking at a trace (CSV) file formatted by TRACERPT. This shows a
> >>>heading that includes an entry labeled "clock-time", and heads a
> >>>column of 18-digit numbers. I'm unable to figure out how to convert
> >>>this number to the actual clock time. Can anybody help, please? For
> >>>what it's worth, the trace was started 26 Feb 2007 4:25:38.625.
>
> >>>Thanks in advance.
>
> >>>Sample:
>
> >>>Event Name, Type, TID, Clock-Time, Kernel(ms),
> >>>User(ms), User Data
> >>> EventTrace, Header, 0x0E28, 128169375386250000,
> >>>0, 0, 4096, 65797...
> >>> HWConfig, CPU, 0x0E28, 128169375386250000,
> >>>0, 0, 2327, 2...
> >>> HWConfig, 14, 0x0E28, 128169375386250000,
> >>>0,...
>
> > Yeah, I thought of something like that, except I had no awareness of
> > anything hat should make me focus on the year 1600. Now I just need to
> > convert the numbers to the actual times of day...
>
> Probably easiest would be to divide by 10 million to get seconds and
> then subtract a set amount to make the remaining number become a serial
> date/time in Excel.

Thanks for that.

Hi there,

I see that you were dealing with a dumpfile.csv that contained the HWConfig event. I assume that the trace log was taken using the "Network TCP/IP" built in provider.

I have also created trace log and was wondering if you knew what the "User Data" fields are for the TcpIp and UdpIp events?

Any help would be appreciated...

Thanks,
DayneO