Wireshark-bugs: [Wireshark-bugs] [Bug 4720] Ethernet Global Data (EGD) timestamp field has wrong
Date: Thu, 29 Apr 2010 04:30:00 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4720

--- Comment #5 from oli <oliver@xxxxxxxxxxxxxxxxx> 2010-04-29 04:30:00 PDT ---
(In reply to comment #3)
> Yes, it does: epan/dissectors/packet-egd.c
>       egd_time.secs  = tvb_get_ntohl(tvb, offset);
>       egd_time.nsecs = tvb_get_ntohl(tvb, offset+4);
>       proto_tree_add_time(egd_tree, hf_egd_time, tvb, offset, 8, &egd_time);
> Problem is that the example code doesn't do hton() on the data it puts out on
> the network. Hence it stays in host order, which you state is LE.
> Since you're able to communicate to the PLCs it's logical to assume these are
> LE too. Could you share a capture file of a working situation, so we can work
> on a valid dissector?

That'll be the problem then. ntohl when it is not required.
Capture attached.

Thanks for your time.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.