Ethereal-users: Re: [Ethereal-users] Two different time stamps

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 30 Jul 2002 14:12:30 -0700
On Tue, Jul 30, 2002 at 05:04:29PM -0400, Ethan Guiles wrote:
> 1) When capturing packets with display options set to seconds since
> beginning of capture, there are two different time references used.  One
> is intuitive, e.g. 0.012238.  The other is mixed in.  It has a time
> stamp like 117178.068043.  This is about 32 hours different that the
> first.  Any ideas on what is happening

No, but it might be a problem with WinPcap on Windows 98.

Try downloading WinDump:

	http://windump.polito.it/

and try capturing with it.

If you have the same problems with time stamps when using WinDump, it's
a WinPcap problem; report it to the WinPcap developers:

	http://winpcap.polito.it/contact.htm