Wireshark-bugs: [Wireshark-bugs] [Bug 760] Wrong timestamps for sniffer Cap file
Date: Tue, 2 Jan 2007 00:28:48 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=760


wmeier@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |WORKSFORME




------- Comment #3 from wmeier@xxxxxxxxxxx  2007-01-02 00:28 GMT -------
Examination of capture files (supplied privately) shows that both Ethereal
0.10.14 and Wireshark 0.99.4 display the correct date for the files. Also:
looking at the file header, the 'captype' and 'timeunit' are standard
values.

So: this is not the usual Sniffer timestamp issue related to 'captype' and
'timeunit'.

However: looking a bit more closely:

Is the problem possibly related to that reported in bug #866 wherein
sniffer capture files over some size show bad timestamps ?

If, for large capture files, the timestamp conversion ends up showing time
deltas which are 3x too long(as reported in bug 866) then it's possible that a
date of 02/09/2006 might display as 02/14/2006 (given the details of the
captures).

Since the timestamps for the supplied files do show correctly and since there's
no specific information that the capture file was a large file we'll close this
bug.

(It can be re-opened by the reporter if it is the case that the capture file
was a large file).

Bill


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.