Wireshark-bugs: [Wireshark-bugs] [Bug 299] Time stamps in some Windows Sniffer files are off by
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=299
------- Comment #15 from disorganizer@xxxxxxx 2007-03-26 15:34 GMT -------
i found out the following about this topic:
setup: pc with sniffer 4.8 and wireshark 99.4
if you capute a file with sniffer 4.8 in "write to disk" mode, then the
inter-packet times are totally off when the file is loaded in wireshark (by
factor 4-5).
as the time of day is calculated from this interpacket-time, it is also way
off.
if you load the file into sniffer, it loads perfect with the right time.
but then the strange thing happens:
if you save the opened file from within sniffer and THEN open in in wireshark,
all is ok.
there seems to be a difference in how sniffer handles files directly written to
disk compared to when they are manually saved. and it has something to do with
the calulation of the interpacket (delta) times.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
