Michael Mann
changed
bug 10008
Comment # 1
on bug 10008
from Michael Mann
What is the expected timestamp? Wireshark v1.6 had been end-of-lifed, but the
\trunk does dissect the timestamps per RFC 5213 (since
Iae4115bcdb445c3b8a97edc2317eaccdf2e0a83b). But as you observed, honoring RFC
5213 does give you a "garbage" timestamp.
The timestamp Wireshark v1.6 produces (Mar 20, 2013 11:17:03.219258000 UTC)
treats the 8 byte timestamp as being NTP format. And that's the only way I
could get those bytes into a sensible timestamp. Is it possible the tool that
produced this packet is actually (incorrectly) using NTP format (from an older
RFC?)
You are receiving this mail because:
- You are watching all bug changes.