Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 299] Time stamps in some Windows Sniffer files are off by a few hours

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=299





------- Comment #18 from disorganizer@xxxxxxx  2007-04-13 14:03 GMT -------
i tested this moment with wireshark-setup-0.99.6-SVN-21397.exe

run sniffer 4.8, make it write directly to disk into a file.
(i used 64mb buffer, stop when full and waited till the buffer was full).

then load file in sniffer and load the file in wireshark,
check the "time from beginning of capture" for the last packet.
this differs (in 45 seconds of capturing i got 2 minutes difference).
if you then check the delta times between the packets, you see why.

if you then go to sniffer and save the file with another name, and then reload
the new file into sniffer you see that wireshark shows the correct delta times,
resulting in identical times for the last packet.

obviously sniffer uses some kind of other format to directly save to disk which
wireshark needs to handle.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.