Wireshark-bugs: [Wireshark-bugs] [Bug 761] Wrong timestamps for sniffer Cap file

From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 2 Jan 2007 00:17:04 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=761


wmeier@xxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WORKSFORME




------- Comment #6 from wmeier@xxxxxxxxxxx  2007-01-02 00:17 GMT -------
Both Ethereal 0.10.14 and Wireshark 0.99.4 display the date for the attached
capture files  as 02/09/2006 which is reported to be the correct date.

Also: looking at the file header, the 'captype' and 'timeunit' are standard
values.

So: this is not the usual Sniffer timestamp issue related to 'captype' and
'timeunit'.

However: looking a bit more closely:

The actual start date of the capture (stored in the file header) is 02/07/2006.
So: is the problem possibly related to that reported in bug #866 wherein
sniffer capture files over some size show bad timestamps ?

If, for large capture files, the timestamp conversion ends up showing time
deltas which are 3x too long(as reported in bug 866) then 02/09/2006 might
display as 02/13/2006 which is getting us pretty close to 2/14/2006.

Since the timestamps for the attached files do show correctly and since there's
no specific information that the capture file was a large file we'll close this
bug.

(It can be re-opened by the reporter if it is the case that the capture file
was a large file).

Bill



-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.