ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 6114] In detail pane, Timestamp is incorrectly decoded for

Date: Mon, 18 Jul 2011 21:16:04 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6114

--- Comment #7 from Norbert Koot <marbert@xxxxxxxxxx> 2011-07-18 21:16:03 PDT ---
(In reply to comment #5)
> Created an attachment (id=6674)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6674) [details]
> Heuristically determine endianness of originate, receive and transmit
> timestamps.

Thank you for acknowledging this issue.  As Mr. Harris states, reversing the
byte order appears to fix the issue for Windows.  I've passed some raw
time-stamp values from 6 different Windows PCs to an Excel sheet, to compare
them (attachment).  Re-ordering the bytes clearly works for WIN98 and XP,
however for Vista and WIN7 the results imply that the byte order is likely the
same but there is another bug in the MS implementation.  The time-stamps after
a 0.1 second delay are different by 93 to 109 seconds.

This means that embedded devices that rely on ICMP time-stamp for clock
synchronization cannot rely on Vista or WIN7.

--Norbert

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.