Ethereal-users: Re: [Ethereal-users] negative time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 11 Dec 2002 17:49:00 -0800
On Wed, Dec 11, 2002 at 10:14:05PM +0100, Martin Regner wrote:
> There seems to be a problem with WinPcap version 2.3 resulting in
> incorrect timestamps sometimes.

...when running on Windows 95, Windows 98, and Windows Me; if running on
Windows NT/2000/XP/.NET Server, or not running on Windows, that
particular bug doesn't exist.

WinPcap 3.0 should fix it, although it's currently an alpha release and
may have other bugs:

	http://www.ethereal.com/faq.html#q5.20

> http://www.ethereal.com/lists/ethereal-users/200205/msg00087.html

In that case, as I remember, it turned out that it was a WinPcap problem
- he either did find the same problem with WinDump, or was using
different versions of WinPcap with WinDump and ethereal.