Wireshark-bugs: [Wireshark-bugs] [Bug 1168] New: Delta time rollover in recording saved in SNIFF
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 17 Oct 2006 10:38:05 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1168

           Summary: Delta time rollover in recording saved in SNIFFER format
           Product: Wireshark
           Version: 0.99.0
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: mark.a.wigmore@xxxxxxxx


Build Information:
Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.2.2, with ADNS, with Lua
5.1.

Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based on
libpcap version 0.9[.x] on Windows XP S, build 2600.

--
In a long recording saved in the Network Associates SNIFFER v2 (Windows) format
the time suddenly jumps backwards. Examining the recording it looks like a
32bit integer storing microseconds is overflowing. The time delta reaches
4294.8654 and then becomes -0.026301 in the next frame. 

The file format contains two 32bit ints for time, lo and hi, so it would appear
that the high word is not being incremented. This is confirmed by an
independant tool that also shows the time resetting.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.