Wireshark-dev: [Wireshark-dev] SNMP TimeTicks 4 or 5 bytes?

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Anders Broman" <anders.broman@xxxxxxxxxxxx>
Date: Mon, 21 Apr 2008 14:10:43 +0200
Title: SNMP TimeTicks 4 or 5 bytes?

Hi,
Looking at BUG http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2253

The problem is (shown with a modified WS)
SNMPv2-MIB::sysUpTime: 4285563608 encoded as:
0000   00 ff 70 82 d8
E.g Coded in 5 octets

TimeTicks is defined as:
TimeTicks ::= [APPLICATION 3] IMPLICIT INTEGER (0..4294967295)

Now should that have been encoded as ff 70 82 d8  (4 octets) a 32 bits negative INTEGER but "translated" to 4294967295 by the BOUNDS?

Or is the current encoding correct?

Regards
Anders