I downloaded the latest version "Version 0.10.8-SVN-13004 (SVN
20050112000031)" and the timestamp decoding is indeed changed!!!
However..... Still has problems.. All of the timestamps show the date
"Jan 06" although the .cap file was created on "Jan 11".. Also, the delta
time is way,way off.... The output shows a delta from first packet as
0.792777 & should be on the order of 1800. seconds. I can supply some
output from the sniffer to help with testing. It's a brand new NAI
distributed Ssniffer, release 4.5....
Thanks,
Dave
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Wednesday, January 12, 2005 3:34 AM
To: Ethereal user support
Subject: Re: [Ethereal-users] Decoding of new NAI sniffer timestamps.
Starr, David wrote:
> We just installed some new NAI sniffers and when I pull up the output
> (.cap
> file) in etheral, the timestamp appears to be off by a factor of
> 1/3......... I run a capture for approx 30 minutes (32 meg file)
> Timestamp in etheral show 600 seconds as the last packet time. Also, the
> frame date/time is not decoded correctly.......
>
> Is there a setting I need to change???? I'm running 0.10.8..
Yes, you need to change the "version of Ethereal you're running"
setting. :-)
After 0.10.8 was released, some developers submitted a change that
should fix many of the problems with time stamps in Sniffer files.
Download the the source, or the Windows installer, for a recent
"buildbot build":
http://www.ethereal.com/distribution/buildbot-builds/
Report bugs you find, so that we can at least try to fix them before the
next release.
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users