Ethereal-users: Re: [Ethereal-users] Bogus Timestamps in .ENC capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Sat, 15 Oct 2005 12:15:24 +0200
Feeny, Michael (TD&DS, Applications Infrastructure Svcs.) wrote:

It seems I have seen this before, but I�ve never seen it discussed, so I�ll ask here�

When I read a .ENC file with Ethereal, the timestamps are INcorrect (wrong date, wrong time). When I reformat that same capture file as a .DMP file, the timestamps shown by Ethereal are all correct.

Has anyone else seen this?

In this particular instance, the source of these .ENC and .DMP files is a NetScout nGenius probe. After the capture file has been stored by nGenius, I can save it as either a .ENC or a .DMP file. I first saved it as a .ENC, and then opened it with Ethereal. The timestamps were in the future.

I then saved the same capture file as a .DMP, opened with Ethereal, and all the timestamps are correct.

I�m running Ethereal 0.10.12.

I don't know about this issue myself.

You may file a bug report on this: http://bugs.ethereal.com/bugzilla/

If possible, please include a sample capture file and some output which makes it clear how it should look like.

Regards, ULFL