Ethereal-users: Re: [Ethereal-users] Timestamps

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 27 Feb 2003 14:53:45 -0800
On Thu, Feb 27, 2003 at 09:54:51AM -0500, VOGEL,ED (HP-USA,ex1) wrote:
> I took an NS_LS_IP nettl trace on an HP 9000 and then opened the trace on a
> Win2K PC with ethereal, 9.6 and 9.9.  There appears to be an extra zero, to
> the immediate right of the decimal point, in the timestamp.  This results in
> an incorrect interval between frames.  When examined with netfmt the
> timestamps are correct.  Is there a fix or workaround for this?

Given that you work for the creators of nettl, the fix would be "find out
how one determines the units of the time stamp in a nettl NS_LS_IP
trace, based on the fields in the file header, and send that information
to ethereal-dev, so that somebody can update the code to handle it" -
unless the nettl format is, at least for the NS_LS_IP subsystem,
publicly documented somewhere, with sufficient information to let us
figure that out, in which case the fix would be "send to ethereal-dev
information on how to find that information".

Nettl format was reverse-engineered, which means there's the risk of an
error.  If we didn't have to reverse-engineer it, that'd reduce the
chances of us getting it wrong.