Ethereal-users: [Ethereal-users] Ethereal Decode of Network Associats Flawed

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: larryjadams@xxxxxxxxxxx
Date: Wed, 17 Nov 2004 17:09:33 +0000
I am comparing a Network Associates/General sniffer capture side by side with the Ethereal version and the time Relative is off by a factor of approximately 2.83x.  In other words, when I have a delta time of .210 in Network General, I show a corresponding delta time of .074 in Ethereal.  Also, the General date is off by over 4 days.  I conducted a sniffer capture on 11/16 and Ethereal shows it as 11/12.  In addition, the sample that I described had an overall duration of approximately 4 minutes and Ethereal showed less than 2.
 
Could somebody explain what is wrong with the decoder and how it can be fixed.
 
Thanks,
 
Larry Adams
TheWitness (Cacti Developer)