http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1418
Summary: RTCP Parsing NTP
Product: Wireshark
Version: unspecified
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: brettcclark@xxxxxxxxxxx
Build Information:
wireshark 0.99.3 (SVN Rev 19011)
Copyright 1998-2006 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.6.9, with GLib 2.6.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.3.1, with ADNS, with Lua
5.1.
Running with WinPcap version 3.1 (packet.dll version 3, 1, 0, 27), based on
libp
cap version 0.9[.x] on Windows XP Service Pack 2, build 2600.
--
When parsing the RTCP packets, the NTP timestamp (when available) has
extraneous values on occasion. For instance, here is the byte data of the
packet:
0000 00 12 3f 1d b7 64 00 10 4b 9b fb 67 08 00 45 00 ..?..d.. K..g..E.
0010 00 68 79 d5 00 00 80 11 37 e3 c0 a8 03 91 c0 a8 .hy..... 7.......
0020 03 eb c0 07 80 77 00 54 68 21 81 c8 00 0c 00 00 .....w.T h!......
0030 7e 2f ea 5e 48 00 c7 b7 40 3c 00 00 95 06 00 00 ~/.^H... @<......
0040 00 b3 00 00 78 44 c6 45 28 88 00 00 00 00 00 00 ....xD.E (.......
0050 de e9 00 00 00 31 40 3c 9e 5d 00 00 4c 00 81 ca .....1@< .]..L...
0060 00 05 00 00 7e 2f 01 00 06 09 49 4e 54 45 4c 20 ....~/.. ..INTEL
0070 4c 44 50 00 00 00 LDP...
It parses the NTP timestamp to be:
...
Timestamp, MSW: 3932047360 (0xea5e4800)
Timestamp, LSW: 3350675516 (0xc7b7403c)
MSW and LSW as NTP timestamp: Aug 7, 2024 19:22:40.7801 UTC
...
Is this correct?
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.