Ethereal-dev: Re: [Ethereal-dev] RE: [Ethereal-users] ethereal v0.8.14.1 and 0.8.14 on NT4SP5

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 16 Dec 2000 12:30:13 -0800
On Sat, Dec 16, 2000 at 12:17:19PM -0800, Guy Harris wrote:
> I shall compare its dissection with what Microsoft's Network Monitor
> claims to be the date and time.

Well, Network Monitor seems to think not that it was done around the
turn of the century, but that it was done by Men From The Future - it
gives the file a modification date/time of Jul 1, 2041 8:57:36.0.

It is not inconceivable that the author of the SMB dissector in Network
Monitor was confused as well; Microsoft have used several different
date/time formats in SMB (changing, I suspect, as their choice of SMB
server OS changed from whatever to Xenix to OS/2 to NT...), and if
you're not one of the folks in the SMB group there, you may well not
know what the Secret Code is for which requests use which formats.