Ethereal-users: Re: [Ethereal-users] FW: [WinPcap-bugs] Incorrect packet arrival time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 12 May 2002 13:18:24 -0700
On Fri, May 10, 2002 at 03:59:35PM +0530, Rajesh Chundi wrote:
> > it worked well with windump. we got the correct timestamp for all packets.

Do you have more than one file named "wpcap.dll" on your system?  (Use
the "Find" or "Search" menu item on the Start menu to scan the C: drive
- and, if Ethereal isn't on the C: drive, to scan whatever file system
it *is* on.)

What happens if you capture to a file with windump:

	windump -w {file_name}

and then read that file with Ethereal?  Does it show correct packet time
stamps or does it show incorrect packet time stamps?

What happens if you save a capture file in Ethereal and then read it
with windump:

	windump -r {file_name}

Are the time stamps correct or incorrect?