| Bug ID |
12349
|
| Summary |
PCAPng ISB timestamps written incorrectly
|
| Product |
Wireshark
|
| Version |
2.1.x (Experimental)
|
| Hardware |
x86-64
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Capture file support (libwiretap)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
Version 2.1.0-2677-g6b963e9 (v2.1.0rc0-2677-g6b963e9 from master)
--
Wireshark saves the Interface Statistics Block start and end timestamp options
incorrectly. According to the PCAPng specifications they're stored as 2 32bit
values (with endianess), but libwiretap starting with 2.1.x seems to store them
now as a single 64bit value (with endianess), which isn't correct.
dumpcap 2.1.x stores the values correctly, but loading a PCAPng file and saving
it in Wireshark breaks the values.
See also https://www.wireshark.org/lists/wireshark-dev/201604/msg00147.html
You are receiving this mail because:
- You are watching all bug changes.