Wireshark-bugs: [Wireshark-bugs] [Bug 9747] Timestamps not preserved in tshark output file
Date: Tue, 11 Feb 2014 20:28:08 +0000

Comment # 6 on bug 9747 from
TShark is expecting the seek-read routine to fill in the struct wtap_pkthdr,
but the seek-read routine for pcap files isn't doing that.

That takes a bit of work to fix (it's fixed in the trunk, but, in the trunk,
seek-read routines take a "Buffer *" rather than a "guint8 *" as the packet
buffer to fill in, so read and seek-read routines can share more of their code
path), and we need to see whether any *other* read routines have this problem
as well.


You are receiving this mail because:
  • You are watching all bug changes.