Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: [Ethereal-users] Timestamps from capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Peter Snellman" <peter.snellman@xxxxxxxxxxxx>
Date: Mon, 18 Apr 2005 21:31:06 +0200
Title: Timestamps from capture files

Hello,

Just installed 0.10.10 on a Windows 2000 box where I previously have 0.9.16 installed.


When running the new version on a capture file, the timestamps displayed was different.

In V 0.9.16  the first timestamp presented is   14:29:40.016107  This time is correct in reagard to what happend.
In V 0.10.10 the first timestamp presented is  11:54:25.787104

The cature file is displayed as a Network Associates Sniffer (Windows-based) 2.00x.

Is this a known problem?

FYI - Not that it should be related to this but I use WinPcap version 3.1 beta3 (packet.dll version 3, 1, 0, 23), based on libpcap version 0.8.1 on Windows 2000 Service Pack 4, build 2195.

Regards,
Peter Snellman