The version is 002.002 and timeunit is 2.
When time unit is 0 the times are match exactly.
We have two alternatives:
1. the TpS for timeunit 2 is wrong
2. the TpS depends on media speed too
What is your opinion?
Oleg Sheinin,
> -----Original Message-----
> From: Guy Harris [mailto:gharris@xxxxxxxxx]
> Sent: Monday, December 10, 2001 1:58
> To: Sheinin, Oleg
> Cc: ethereal-dev@xxxxxxxxxxxx
> Subject: Re: [Ethereal-dev] Ethereal time problem with Sniffer Pro
> 4.50.04 files
>
>
> On Sun, Dec 09, 2001 at 01:11:46PM +0200, Sheinin, Oleg wrote:
> > As I can guess the time differences is exactly triple, when
> captures is made
> > at 100BaseT media.
> > The media speed can be found in the capture header structure.
>
> Yes, but that doesn't mean that the media speed is what Wiretap should
> check.
>
> There's also:
>
> > /* NetXRay file header (minus magic number). */
> > struct netxray_hdr {
>
> ...
>
> > guint8 timeunit; /* encodes length of a tick */
>
> ...
>
> Ethereal 0.8.20 checks that field if the file has a version number of
> 002.001 or 002.002; what's the version number of the files
> and, if it's
> 002.001 or 002.002, what's the value of the "timeunit" field?
>