Where can you look to see if the time span of the pcap covers the time of the issue?