If somebody wants to test with one of the new NAI distributed sniffer .cap
files, just let me know & I'll package one up & get it to them.... I know
it's hard to keep track of all the new hardware that's out there! We just
got them in & running this week......
The delta time may be from the previous packet in this latest version...
The first one I had installed, it was off by 1/3.. This version, it seems
more likely that it's from the previous packet, instead of the first packet.
Dave
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Wednesday, January 12, 2005 5:06 PM
To: Ethereal user support
Subject: RE: [Ethereal-users] Decoding of new NAI sniffer timestamps.
Starr, David said:
> However..... Still has problems.. All of the timestamps show the date
> "Jan 06" although the .cap file was created on "Jan 11".. Also, the
> delta time is way,way off.... The output shows a delta from first
> packet as 0.792777 & should be on the order of 1800. seconds.
Presumably that's the delta of some packet other than the first packet from
the first packet? (Note that Ethereal doesn't display any deltas from the
time the capture started, it only displays deltas from the first
packet.)
> I can supply some output from the sniffer to help with testing.
"Output from the sniffer" in the sense of a .cap file?
One of the .cap files with problems, and an indication of what the (date and
time of day) time stamps for the packets in that file should be, would be
helpful (and would possibly be necessary).
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users