https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4484
Jakub Zawadzki <darkjames@xxxxxxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |darkjames@xxxxxxxxxxxxxxxx
--- Comment #1 from Jakub Zawadzki <darkjames@xxxxxxxxxxxxxxxx> 2010-02-25 01:19:56 PST ---
Loading of this capture fails on (from wireshark/wiretap/erf.c):
#v+
if ((ts = pletohll(&header.ts)) < prevts) {
/* reassembled AALx records may not be in time order, also records are
not in strict time order between physical interfaces, so allow 1 sec fudge */
if ( ((prevts-ts)>>32) > 1 ) {
return 0;
}
}
#v-
I forced loading capture with:
ERF_RECORDS_TO_CHECK=1 ./wireshark /tmp/frame_log_server.erf
It loads fine however some frames has negative (and more interesting the same!)
delta time.
By the way ERF file format
(http://www.endace.com/support/EndaceRecordFormat.pdf)
is no longer available.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.