Wireshark-bugs: [Wireshark-bugs] [Bug 9774] New: Display filter frame.time_delta > 0.1 returns i

Date: Sun, 16 Feb 2014 18:24:46 +0000
Bug ID 9774
Summary Display filter frame.time_delta > 0.1 returns incorrect results
Classification Unclassified
Product Wireshark
Version 1.10.5
Hardware x86-64
OS All
Status UNCONFIRMED
Severity Major
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Build Information:
Version 1.10.5 (SVNRev 54262 from /trunk-1.10)

Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_3), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with
PortAudio V19-devel (built Dec 19 2013), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.
       Intel(R) Core(TM) i7-2640M CPU @ 2.80GHz, with 8072MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219

--
when I activate the mentioned filter, I get for example these two frames
reported:

> Frame Number: 59662
> Arrival Time: Feb 16, 2014 07:59:55.281511000 Mitteleuropäische Zeit
> Time delta from previous captured frame: 40.406870000 seconds

> Frame Number: 60296
> Arrival Time: Feb 16, 2014 07:59:55.791893000 Mitteleuropäische Zeit
> Time delta from previous captured frame: 28.907126000 seconds

They match, as the displayed Time delta from previous captured frame is larger
than 0.1 seconds.

But these numbers are crap, as delta of Arrival Time is by far less then
28.907126000 seconds.

Clearing the display filter and having a look at frames 60295 and 60296 shows
the following:

> Frame Number: 60295
> Arrival Time: Feb 16, 2014 07:59:55.788399000 Mitteleuropäische Zeit
> Time delta from previous captured frame: 0.000035000 seconds

> Frame Number: 60296
> Arrival Time: Feb 16, 2014 07:59:55.791893000 Mitteleuropäische Zeit
> Time delta from previous captured frame: 0.003494000 seconds


You are receiving this mail because:
  • You are watching all bug changes.