Ethereal-dev: Re: [Ethereal-dev] Ethereal time problem with Sniffer Pro 4.50.04 files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 9 Dec 2001 15:58:25 -0800
On Sun, Dec 09, 2001 at 01:11:46PM +0200, Sheinin, Oleg wrote:
> As I can guess the time differences is exactly triple, when captures is made
> at 100BaseT media.
> The media speed can be found in the capture header structure.

Yes, but that doesn't mean that the media speed is what Wiretap should
check.

There's also:

> /* NetXRay file header (minus magic number). */
> struct netxray_hdr {

	...

>  guint8 timeunit; /* encodes length of a tick */

...

Ethereal 0.8.20 checks that field if the file has a version number of
002.001 or 002.002; what's the version number of the files and, if it's
002.001 or 002.002, what's the value of the "timeunit" field?