Ethereal-users: Re: [Ethereal-users] Decoding of new NAI sniffer timestamps.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 12 Jan 2005 01:34:05 -0800
Starr, David wrote:

We just installed some new NAI sniffers and when I pull up the output (.cap
file) in etheral, the timestamp appears to be off by a factor of
1/3.........  I run a capture for approx 30 minutes (32 meg file)
Timestamp in etheral show 600 seconds as the last packet time.  Also, the
frame date/time is not decoded correctly.......

Is there a setting I need to change????  I'm running 0.10.8..
Yes, you need to change the "version of Ethereal you're running" setting. :-)
After 0.10.8 was released, some developers submitted a change that should fix many of the problems with time stamps in Sniffer files. Download the the source, or the Windows installer, for a recent "buildbot build": 

	http://www.ethereal.com/distribution/buildbot-builds/
Report bugs you find, so that we can at least try to fix them before the next release.