blocks|key|268513|text|假设您询问的是FILETIME结构，然后FileTimeToSystemTime执行了您想要的操作，那么您可以从它生成的SYSTEMTIME结构中获得秒数。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|268514|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/ms724284%2528v=vs.85%2529.aspx|1|http://msdn.microsoft.com/en-us/library/ms724280%2528v=vs.85%2529.aspx|2|http://msdn.microsoft.com/en-us/library/ms724950%2528v=vs.85%2529.aspx^0|7|8|0|K|K|1|1O|A|2|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]|$A|T|B|U|1|V]|$A|W|B|X|1|Y]]|C|$]]|$1|D|3|-4|5|6|7|Z|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]|N|$5|G|H|I|C|$J|O]]]]

Assuming you are asking about the <a href="http://msdn.microsoft.com/en-us/library/ms724284%28v=vs.85%29.aspx" rel="nofollow">FILETIME</a> Structure, then <a href="http://msdn.microsoft.com/en-us/library/ms724280%28v=vs.85%29.aspx" rel="nofollow">FileTimeToSystemTime</a> does what you want, you can get the seconds from the <a href="http://msdn.microsoft.com/en-us/library/ms724950%28v=vs.85%29.aspx" rel="nofollow">SYSTEMTIME</a> structure it produces.

blocks|key|2963223|text|FILETIME类型是自1601年1月1日以来递增100+ns的数字。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2963224|要将其转换为unix+time_t，您可以使用以下命令。|2963225|#define+TICKS_PER_SECOND+10000000
#define+EPOCH_DIFFERENCE+11644473600LL
time_t+convertWindowsTimeToUnixTime(long+long+int+input){
++++long+long+int+temp;
++++temp+=+input+/+TICKS_PER_SECOND;+//convert+from+100ns+intervals+to+seconds;
++++temp+=+temp+-+EPOCH_DIFFERENCE;++//subtract+number+of+seconds+between+epochs
++++return+(time_t)+temp;
}|code-block|syntax|javascript|2963226|然后，您可以使用ctime函数来操作它。|2963227|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|O|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

FILETIME type is is the number 100 ns increments since January 1 1601.

To convert this into a unix time_t you can use the following.

<pre><code>#define TICKS_PER_SECOND 10000000
#define EPOCH_DIFFERENCE 11644473600LL
time_t convertWindowsTimeToUnixTime(long long int input){
 long long int temp;
 temp = input / TICKS_PER_SECOND; //convert from 100ns intervals to seconds;
 temp = temp - EPOCH_DIFFERENCE; //subtract number of seconds between epochs
 return (time_t) temp;
}
</code></pre>

you may then use the ctime functions to manipulate it.

blocks|key|2963229|text|这很简单:+windows时期从1601-01-01T00:00:00Z开始。比UNIX/Linux时代早11644473600秒(1970-01-01T00:00:00Z)。Windows的计时单位是100纳秒。因此，从UNIX时期获取秒数的函数将如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2963230|#define+WINDOWS_TICK+10000000
#define+SEC_TO_UNIX_EPOCH+11644473600LL

unsigned+WindowsTickToUnixSeconds(long+long+windowsTicks)
{
+++++return+(unsigned)(windowsTicks+/+WINDOWS_TICK+-+SEC_TO_UNIX_EPOCH);
}|code-block|syntax|javascript|2963231|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

it's quite simple: the windows epoch starts 1601-01-01T00:00:00Z. It's 11644473600 seconds before the UNIX/Linux epoch (1970-01-01T00:00:00Z). The Windows ticks are in 100 nanoseconds. Thus, a function to get seconds from the UNIX epoch will be as follows:

<pre><code>#define WINDOWS_TICK 10000000
#define SEC_TO_UNIX_EPOCH 11644473600LL

unsigned WindowsTickToUnixSeconds(long long windowsTicks)
{
 return (unsigned)(windowsTicks / WINDOWS_TICK - SEC_TO_UNIX_EPOCH);
}
</code></pre>

blocks|key|2963233|text|(我发现我无法在注释中输入可读代码，所以...)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2963234|请注意，Windows可以表示POSIX纪元时间范围之外的时间，因此转换例程应根据需要返回“超出范围”指示。最简单的方法是：|2963235|+++...+(as+above)
+++long+long+secs;
+++time_t+t;

+++secs+=+(windowsTicks+/+WINDOWS_TICK+-+SEC_TO_UNIX_EPOCH);
+++t+=+(time_t)+secs;
+++if+(secs+!=+(long+long)+t)++++//+checks+for+truncation/overflow/underflow
++++++return+(time_t)+-1;+++//+value+not+representable+as+a+POSIX+time
+++return+t;|code-block|syntax|javascript|2963236|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

(I discovered I can't enter readable code in a comment, so...)

Note that Windows can represent times outside the range of POSIX epoch times, and thus a conversion routine should return an "out-of-range" indication as appropriate. The simplest method is: 

<pre><code> ... (as above)
 long long secs;
 time_t t;

 secs = (windowsTicks / WINDOWS_TICK - SEC_TO_UNIX_EPOCH);
 t = (time_t) secs;
 if (secs != (long long) t) // checks for truncation/overflow/underflow
 return (time_t) -1; // value not representable as a POSIX time
 return t;
</code></pre>

blocks|key|3176996|text|使用夏令时时，除法和加法的解决方案将无法正常工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3176997|这是一个可以工作的代码片段，但它是用于windows的。|3176998|time_t+FileTime_to_POSIX(FILETIME+ft)
{
++++FILETIME+localFileTime;
++++FileTimeToLocalFileTime(&ft,&localFileTime);
++++SYSTEMTIME+sysTime;
++++FileTimeToSystemTime(&localFileTime,&sysTime);
++++struct+tm+tmtime+=+{0};
++++tmtime.tm_year+=+sysTime.wYear+-+1900;
++++tmtime.tm_mon+=+sysTime.wMonth+-+1;
++++tmtime.tm_mday+=+sysTime.wDay;
++++tmtime.tm_hour+=+sysTime.wHour;
++++tmtime.tm_min+=+sysTime.wMinute;
++++tmtime.tm_sec+=+sysTime.wSecond;
++++tmtime.tm_wday+=+0;
++++tmtime.tm_yday+=+0;
++++tmtime.tm_isdst+=+-1;
++++time_t+ret+=+mktime(&tmtime);
++++return+ret;
}|code-block|syntax|javascript|3176999|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

The solution that divides and adds will not work correctly with daylight savings.

Here is a snippet that works, but it is for windows.

<pre class="lang-c prettyprint-override"><code>time_t FileTime_to_POSIX(FILETIME ft)
{
 FILETIME localFileTime;
 FileTimeToLocalFileTime(&amp;ft,&amp;localFileTime);
 SYSTEMTIME sysTime;
 FileTimeToSystemTime(&amp;localFileTime,&amp;sysTime);
 struct tm tmtime = {0};
 tmtime.tm_year = sysTime.wYear - 1900;
 tmtime.tm_mon = sysTime.wMonth - 1;
 tmtime.tm_mday = sysTime.wDay;
 tmtime.tm_hour = sysTime.wHour;
 tmtime.tm_min = sysTime.wMinute;
 tmtime.tm_sec = sysTime.wSecond;
 tmtime.tm_wday = 0;
 tmtime.tm_yday = 0;
 tmtime.tm_isdst = -1;
 time_t ret = mktime(&amp;tmtime);
 return ret;
}
</code></pre>

blocks|key|264807|text|如果有人需要将其转换为MySQL|type|unstyled|depth|inlineStyleRanges|entityRanges|data|264808|SELECT+timestamp,+
+++++++FROM_UNIXTIME(ROUND((((timestamp)+/+CAST(10000000+AS+UNSIGNED+INTEGER)))+
+++++++++-+CAST(11644473600+AS+UNSIGNED+INTEGER),0))+
+++++++AS+Converted+FROM+events++LIMIT+100|code-block|syntax|javascript|264809|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If somebody need convert it in MySQL

<pre><code>SELECT timestamp, 
 FROM_UNIXTIME(ROUND((((timestamp) / CAST(10000000 AS UNSIGNED INTEGER))) 
 - CAST(11644473600 AS UNSIGNED INTEGER),0)) 
 AS Converted FROM events LIMIT 100
</code></pre>

blocks|key|264811|text|这里基本上是相同的解决方案，只是这个解决方案正确地编码了Ldap中的负数，并在转换之前去掉了最后7位数字。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|264812|++++public+static+int+LdapValueAsUnixTimestamp(SearchResult+searchResult,+string+fieldName)
++++{
++++++++var+strValue+=+LdapValue(searchResult,+fieldName);
++++++++if+(strValue+==+"0")+return+0;
++++++++if+(strValue+==+"9223372036854775807")+return+-1;

++++++++return+(int)(long.Parse(strValue.Substring(0,+strValue.Length+-+7))+-+11644473600);
++++}|code-block|syntax|javascript|264813|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here's essentially the same solution except this one encodes negative numbers from Ldap properly and lops off the last 7 digits before conversion.

<pre><code> public static int LdapValueAsUnixTimestamp(SearchResult searchResult, string fieldName)
 {
 var strValue = LdapValue(searchResult, fieldName);
 if (strValue == "0") return 0;
 if (strValue == "9223372036854775807") return -1;

 return (int)(long.Parse(strValue.Substring(0, strValue.Length - 7)) - 11644473600);
 }
</code></pre>

blocks|key|2963267|text|另外，这里有一种纯C#ian的方法。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2963268|(Int32)(DateTime.FromFileTimeUtc(129477880901875000).Subtract(new+DateTime(1970,+1,+1))).TotalSeconds;|code-block|syntax|javascript|2963269|下面是我的即时窗口中两种方法的结果：|2963270|(Int32)(DateTime.FromFileTimeUtc(long.Parse(strValue)).Subtract(new+DateTime(1970,+1,+1))).TotalSeconds;
1303314490
(int)(long.Parse(strValue.Substring(0,+strValue.Length+-+7))+-+11644473600)
1303314490
DateTime.FromFileTimeUtc(long.Parse(strValue))
{2011-04-20+3:48:10+PM}
++++Date:+{2011-04-20+12:00:00+AM}
++++Day:+20
++++DayOfWeek:+Wednesday
++++DayOfYear:+110
++++Hour:+15
++++InternalKind:+4611686018427387904
++++InternalTicks:+634389112901875000
++++Kind:+Utc
++++Millisecond:+187
++++Minute:+48
++++Month:+4
++++Second:+10
++++Ticks:+634389112901875000
++++TimeOfDay:+{System.TimeSpan}
++++Year:+2011
++++dateData:+5246075131329262904|2963271|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Also here's a pure C#ian way to do it.

<pre><code>(Int32)(DateTime.FromFileTimeUtc(129477880901875000).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;
</code></pre>

Here's the result of both methods in my immediate window:

<pre><code>(Int32)(DateTime.FromFileTimeUtc(long.Parse(strValue)).Subtract(new DateTime(1970, 1, 1))).TotalSeconds;
1303314490
(int)(long.Parse(strValue.Substring(0, strValue.Length - 7)) - 11644473600)
1303314490
DateTime.FromFileTimeUtc(long.Parse(strValue))
{2011-04-20 3:48:10 PM}
 Date: {2011-04-20 12:00:00 AM}
 Day: 20
 DayOfWeek: Wednesday
 DayOfYear: 110
 Hour: 15
 InternalKind: 4611686018427387904
 InternalTicks: 634389112901875000
 Kind: Utc
 Millisecond: 187
 Minute: 48
 Month: 4
 Second: 10
 Ticks: 634389112901875000
 TimeOfDay: {System.TimeSpan}
 Year: 2011
 dateData: 5246075131329262904
</code></pre>

blocks|key|2963273|text|老问题的新答案。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2963274|使用C%2B%2B11的<chrono>加上这个免费的开源库：|offset|length|style|CODE|2963275|https://github.com/HowardHinnant/date|2963276|可以非常容易地将这些时间戳转换为std::chrono::system_clock::time_point，还可以将这些时间戳转换为公历中的人类可读格式：|2963277|#include+"date.h"
#include+<iostream>

std::chrono::system_clock::time_point
from_windows_filetime(long+long+t)
{
++++using+namespace+std::chrono;
++++using+namespace+date;
++++using+wfs+=+duration<long+long,+std::ratio<1,+10'000'000>>;
++++return+system_clock::time_point{floor<system_clock::duration>(wfs{t}+-
++++++++++++++++++++++++(sys_days{1970_y/jan/1}+-+sys_days{1601_y/jan/1}))};
}

int
main()
{
++++using+namespace+date;
++++std::cout+<<+from_windows_filetime(128166372003061629)+<<+'\n';
++++std::cout+<<+from_windows_filetime(128166372016382155)+<<+'\n';
++++std::cout+<<+from_windows_filetime(128166372026382245)+<<+'\n';
}|code-block|syntax|javascript|2963278|对我来说，这是输出：|2963279|2007-02-22+17:00:00.306162
2007-02-22+17:00:01.638215
2007-02-22+17:00:02.638224|2963280|在Windows上，你实际上可以跳过floor，得到精度的最后一个十进制数字：|2963281|++++return+system_clock::time_point{wfs{t}+-
++++++++++++++++++++++++(sys_days{1970_y/jan/1}+-+sys_days{1601_y/jan/1})};

2007-02-22+17:00:00.3061629
2007-02-22+17:00:01.6382155
2007-02-22+17:00:02.6382245|2963282|启用优化后，子表达式(sys_days{1970_y/jan/1}+-+sys_days{1601_y/jan/1})将在编译时转换为days{134774}，后者将在编译时进一步转换为完整表达式所需的任何单位(秒、100纳秒等)。底线:这是非常可读和非常有效的。|2963283|entityMap|0|LINK|mutability|MUTABLE|url^0|0|8|8|0|0|11|0|0|G|11|0|0|0|0|I|5|0|0|A|1D|1V|C|0^^$0|@$1|2|3|4|5|6|7|17|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|18|8|@$D|19|E|1A|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|1B|8|@]|9|@$D|1C|E|1D|1|1E]]|A|$]]|$1|J|3|K|5|6|7|1F|8|@$D|1G|E|1H|F|G]]|9|@]|A|$]]|$1|L|3|M|5|N|7|1I|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1J|8|@]|9|@]|A|$]]|$1|S|3|T|5|N|7|1K|8|@]|9|@]|A|$O|P]]|$1|U|3|V|5|6|7|1L|8|@$D|1M|E|1N|F|G]]|9|@]|A|$]]|$1|W|3|X|5|N|7|1O|8|@]|9|@]|A|$O|P]]|$1|Y|3|Z|5|6|7|1P|8|@$D|1Q|E|1R|F|G]|$D|1S|E|1T|F|G]]|9|@]|A|$]]|$1|10|3|-4|5|6|7|1U|8|@]|9|@]|A|$]]]|11|$12|$5|13|14|15|A|$16|I]]]]

New answer for old question.

Using C++11's <code>&lt;chrono&gt;</code> plus this free, open-source library:

<a href="https://github.com/HowardHinnant/date" rel="noreferrer">https://github.com/HowardHinnant/date</a>

One can very easily convert these timestamps to <code>std::chrono::system_clock::time_point</code>, and also convert these timestamps to human-readable format in the Gregorian calendar:

<pre><code>#include "date.h"
#include &lt;iostream&gt;

std::chrono::system_clock::time_point
from_windows_filetime(long long t)
{
 using namespace std::chrono;
 using namespace date;
 using wfs = duration&lt;long long, std::ratio&lt;1, 10'000'000&gt;&gt;;
 return system_clock::time_point{floor&lt;system_clock::duration&gt;(wfs{t} -
 (sys_days{1970_y/jan/1} - sys_days{1601_y/jan/1}))};
}

int
main()
{
 using namespace date;
 std::cout &lt;&lt; from_windows_filetime(128166372003061629) &lt;&lt; '\n';
 std::cout &lt;&lt; from_windows_filetime(128166372016382155) &lt;&lt; '\n';
 std::cout &lt;&lt; from_windows_filetime(128166372026382245) &lt;&lt; '\n';
}
</code></pre>

For me this outputs:

<pre><code>2007-02-22 17:00:00.306162
2007-02-22 17:00:01.638215
2007-02-22 17:00:02.638224
</code></pre>

On Windows, you can actually skip the <code>floor</code>, and get that last decimal digit of precision:

<pre><code> return system_clock::time_point{wfs{t} -
 (sys_days{1970_y/jan/1} - sys_days{1601_y/jan/1})};

2007-02-22 17:00:00.3061629
2007-02-22 17:00:01.6382155
2007-02-22 17:00:02.6382245
</code></pre>

With optimizations on, the sub-expression <code>(sys_days{1970_y/jan/1} - sys_days{1601_y/jan/1})</code> will translate at compile time to <code>days{134774}</code> which will further compile-time-convert to whatever units the full-expression requires (seconds, 100-nanoseconds, whatever). Bottom line: This is both very readable and very efficient.

I have a trace file that each transaction time represented in Windows filetime format. These time numbers are something like this: 

<ul>
<li>128166372003061629 </li>
<li>128166372016382155</li>
<li>128166372026382245</li>
</ul>

Would you please let me know if there are any C/C++ library in Unix/Linux to extract actual time (specially second) from these numbers ? May I write my own extraction function ?

Convert Windows Filetime to second in Unix/Linux

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我有一个跟踪文件，每个事务时间都以Windows文件时间格式表示。这些时间数字是这样的：128166372003061629 128166372016382155128166372026382245您能告诉我Unix/Linux中是否有C/C++库可以从这些数字中提取实际时间(特别是秒)吗？我可以写我自己的提取函数吗？

问在Unix/Linux中将Windows文件时间转换为秒
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在Unix/Linux中将Windows文件时间转换为秒EN