Wireshark-bugs: [Wireshark-bugs] [Bug 3368] The timestamp line in a RTP or RTCP packet display's
Date: Mon, 8 Oct 2012 07:34:25 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3368

--- Comment #7 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2012-10-08 07:34:24 PDT ---
(In reply to comment #4)
> RFC 3550 says:
> "
>    Wallclock time (absolute date and time) is represented using the
>    timestamp format of the Network Time Protocol (NTP), which is in
>    seconds relative to 0h UTC on 1 January 1900 [4].
> "
> 
> While the 'normal' time conversion routines use 1-1-1970 as epoch. That's a
> difference of 70 years, which results in... 2208988800UL seconds.
> You cannot assume the sample capture has the correct timestamp on it.

The link to http://www.epochconverter.com/ was provided by LeRoy within the
Word document posted, and so I mistakenly inferred that it was an NTP Epoch
converter, but you're right; it's a Unix Epoch converter.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.