["Sheinin, Oleg" <Oleg.Sheinin@xxxxxxxxx>]

Hi, All !

I have two files that created by Sniff Pro and NetXray.
In all two files the 'timeunit' field is set to 2.
Sniff Pro File have 002.002 and NetXRay - 001.100 versions.
In all captures we have problem with reading it in Ethereal.

The Sniff Pro capture have exactly triple value of tick per
second(1193180*3=3579540.0)
The NetXRay have the 459.761*1193180 value of tps.

The 1193180 vaue is taken from wiretap/netxray.c file for timeunit=2

And yet another interesting thing that we have two machines with installed
Sniff Pro and NetXRay on it.
The configuration of Sniff Pro box is Dual Pentium II 500, Intel PRO/100+
Management NIC media - 10BaseT.
The NetXRay box have the 100BaseT media.
Captures can be read on those machines with the right times.
On the Single Pentium II 350, 3Com 59x NIC we have exactly the same effect
as described above.

Does it mean that tps depends on computer configuration ?
Does it mean that tps changes between file versions ?
What exactly mean the timeunit value ?

Any opinions ?

Thanks,

Oleg Sheinin, 
E-Mail: mailto://Oleg.Sheinin@xxxxxxxxx 
This message is made with 100% recyclable electrons.