Hi
I have just downloaded the latest release
of Ethereal from the ethereal site and am having problems with incorrect
timestamps.
Version info is as follows...
**********
Compiled with GTK+ 2.4.14, with GLib
2.4.7, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 4.4, with
Net-SNMP 5.2.1.2, with ADNS.
Running with WinPcap version 3.1 beta4
(packet.dll version 3, 1, 0, 24), based on libpcap version 0.8.3 on Windows
2000 Service Pack4, Build 2195
**********
This was a clean, first time install
of the application on this server so there are no 'older version' related
problems
If I capture packets with the Ethereal
application with default settings the timestamps display correctly.
However, if I capture packets using
Tethereal with the following command line the timestamps display much further
apart.
**********
tethereal -b filesize:50000 -b files:770
-f "not host 172.16.0.21 and not host 172.16.2.235" -w F:\captures\captures.pcap
**********
For instance, if i capture 5 seconds
of data, the first packet displays the correct timestamp, but the last
packet displays a timestamp but the last timestamp (5 seconds later) says
that 1hr and 29 minutes has elapsed.
I don't understand why the Ethereal
application works, but not the Tethereal one.
Can someone please help.
Thnaks
Paul k
www.cardax.com
This e-mail is confidential and
may contain information subject to legal privilege. If you are not the
intended recipient please advise us of our error by return e-mail then delete
this e-mail and any attached files. You may not copy, disclose or use the
contents in any way.
The views expressed in this
e-mail may not be those of Gallagher Group Ltd or subsidiary companies
thereof.