Ethereal-users: [Ethereal-users] Incorrect timestamp for Distributed SnifferPro 4.x

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "SMITH CHRIS (nrd1czs)" <nrd1czs@xxxxxxx>
Date: Wed, 12 Feb 2003 14:57:30 -0500
I have files captured by NA's distributed sniffer pro (version 4.2 and 4.5
or .7).
 
When I read them with Ethereal (version 0.9.x) or convert them with editcap,
the timestamps are garbled:  The day is right; the time is off by hours and
the fraction of a second is negative.
 
I've followed the discussion from 2 years ago, but what I read doesn't
square with what I'm seeing in the packet headers.
 
Is this still a problem for others?
 
Chris Smith
 
 
PS... I have some sample files and printouts from Sniffer with their version
of the timestamps that I can post to an FTP server (it's a couple meg,
zipped)