[dfdatetime] Added get plaso timestamp support.

[dfdatetime] Added copy to micro POSIX timestamp support.

[Joachim Metz, 2016-04-20 20:31:02]

https://codereview.appspot.com/298870043/diff/1/dfdatetime/fake_time.py
File dfdatetime/fake_time.py (right):

https://codereview.appspot.com/298870043/diff/1/dfdatetime/fake_time.py#newco...
dfdatetime/fake_time.py:20: """Copies the timestamp to a POSIX timestamps in
microseconds.
the timestamp => the fake timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/fake_time.py#newco...
dfdatetime/fake_time.py:29: """Copies the timestamp to a stat timestamp tuple.
the timestamp => the fake timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/filetime.py
File dfdatetime/filetime.py (right):

https://codereview.appspot.com/298870043/diff/1/dfdatetime/filetime.py#newcode82
dfdatetime/filetime.py:82: """Copies the timestamp to a POSIX timestamps in
microseconds.
the timestamp => the FILETIME timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/filetime.py#newcode98
dfdatetime/filetime.py:98: """Copies the timestamp to a stat timestamp tuple.
the timestamp => the FILETIME timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/interface.py
File dfdatetime/interface.py (right):

https://codereview.appspot.com/298870043/diff/1/dfdatetime/interface.py#newco...
dfdatetime/interface.py:196: """Copies the timestamp to a POSIX timestamps in
microseconds.
the timestamp => the date time values

https://codereview.appspot.com/298870043/diff/1/dfdatetime/interface.py#newco...
dfdatetime/interface.py:205: """Copies the timestamp to a stat timestamp tuple.
the timestamp => the date time values

https://codereview.appspot.com/298870043/diff/1/dfdatetime/posix_time.py
File dfdatetime/posix_time.py (right):

https://codereview.appspot.com/298870043/diff/1/dfdatetime/posix_time.py#newc...
dfdatetime/posix_time.py:34: """Copies the timestamp to a POSIX timestamps in
microseconds.
the timestamp => the POSIX timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/posix_time.py#newc...
dfdatetime/posix_time.py:43: """Copies the timestamp to a stat timestamp tuple.
the timestamp => the POSIX timestamp

https://codereview.appspot.com/298870043/diff/1/dfdatetime/time_elements.py
File dfdatetime/time_elements.py (right):

https://codereview.appspot.com/298870043/diff/1/dfdatetime/time_elements.py#n...
dfdatetime/time_elements.py:23: """Copies the timestamp to a POSIX timestamps in
microseconds.
the timestamp => the time elements

https://codereview.appspot.com/298870043/diff/1/dfdatetime/time_elements.py#n...
dfdatetime/time_elements.py:32: """Copies the timestamp to a stat timestamp
tuple.
the timestamp => the time elements

[Joachim Metz, 2016-04-21 06:46:08]

Code updated.

[onager, 2016-04-28 11:35:24]

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py
File dfdatetime/fake_time.py (right):

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py#n...
dfdatetime/fake_time.py:19: def CopyToMicroPosixTimestamp(self):
I don't think this is a "PosixTimestamp", as a posix timestamp is the number of
seconds, with no additional precision.
http://pubs.opengroup.org/onlinepubs/9699919799/

This is the number of micros since the posix epoch.

[Joachim Metz, 2016-04-29 03:17:00]

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py
File dfdatetime/fake_time.py (right):

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py#n...
dfdatetime/fake_time.py:19: def CopyToMicroPosixTimestamp(self):
Hence "micro POSIX timestamp", what alternative do you propose?

[onager, 2016-06-01 06:26:17]

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py
File dfdatetime/fake_time.py (right):

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py#n...
dfdatetime/fake_time.py:19: def CopyToMicroPosixTimestamp(self):
On 2016/04/29 03:17:00, Joachim Metz wrote:
> Hence "micro POSIX timestamp", what alternative do you propose?

Some (admittedly less than awesome) options:

MicroSecondsSincePosixEpoch
MicrosSincePosixEpoch

Some other thoughts:
* Is referring to this as a "timestamp" actually useful? We just return a number
* CopyTo* and CopyFrom* seem like weird names for these sorts of method - what's
being copied from where to where? This method just returns a number which is the
representation of the time, I don't see anything being copied.

[Joachim Metz, 2016-06-07 05:06:40]

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py
File dfdatetime/fake_time.py (right):

https://codereview.appspot.com/298870043/diff/20001/dfdatetime/fake_time.py#n...
dfdatetime/fake_time.py:19: def CopyToMicroPosixTimestamp(self):
As discussed: GetPlasoTimestamp for its temporary purpose.

[Joachim Metz, 2016-06-07 05:06:58]

Code updated.

[onager, 2016-06-10 04:42:43]

LGTM

[Joachim Metz, 2016-06-10 04:56:16]

Changes have been merged with master branch. To close the review and clean up
the feature branch you can run: python ./utils/review.py close posixmicro