Ethereal-users: [Ethereal-users] Incorrect timestamp for Distributed SnifferPro 4.x

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "SMITH CHRIS (nrd1czs)" <nrd1czs@xxxxxxx>
Date: Wed, 12 Feb 2003 14:57:30 -0500
I have files captured by NA's distributed sniffer pro (version 4.2 and 4.5
or .7).
 
When I read them with Ethereal (version 0.9.x) or convert them with editcap,
the timestamps are garbled:  The day is right; the time is off by hours and
the fraction of a second is negative.
 
I've followed the discussion from 2 years ago, but what I read doesn't
square with what I'm seeing in the packet headers.
 
Is this still a problem for others?
 
Chris Smith
 
 
PS... I have some sample files and printouts from Sniffer with their version
of the timestamps that I can post to an FTP server (it's a couple meg,
zipped)