http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=45504
User: guy
Date: 2012/10/12 01:51 PM
Log:
The "rate" field in the CommView NCF format is 1 byte long, not 2 bytes
long; that means we read only one byte into our structure, so make its
"rate" element one byte long, so we don't fill in half the "rate"
element with the read - and the *wrong* half on big-endian machines -
and leave the other half un-set and thus containing some random possibly
non-zero data.
In addition, that's not the full data rate for faster networks; for
Wi-Fi, the one-byte "direction" field is actually the upper 8 bits of
the data rate, so combine them when we fill in the data rate in the
pseudo-header.
#BACKPORT
Directory: /trunk/wiretap/
Changes Path Action
+3 -2 commview.c Modified