Ethereal-users: Re: [Ethereal-users] Network Associates Sniffer timestamps displayed incorrectly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Robert Long" <rlong@xxxxxxxxxx>
Date: Mon, 07 Jul 2003 20:06:01 -0000
I was able to fix the timestamps by changing a line in
wiretap/netxray.c.  I dont know how this could be implemented so it does
not break other Sniffer versions.

change the following line in netxray_open:

(line 396) wth->capture.netxray->start_timestamp = t;
to 
(line 396) wth->capture.netxray->start_timestamp = 0;

I dont know if there is a field in the header to indicate that the first
packet is time 0.