Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 8410] New: netflow dissector flowDurationMicroseconds nano

Date: Wed, 27 Feb 2013 20:12:27 +0000
Bug ID 8410
Summary netflow dissector flowDurationMicroseconds nanosecond conversion wrong
Classification Unclassified
Product Wireshark
Version SVN
Hardware x86
OS Mac OS X 10.8
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Build Information:

--
This code

        case 162: /*  flowDurationMicroseconds */
            msec_delta = tvb_get_ntohl(tvb, offset);
            ts_delta.secs = msec_delta / 1000000;
            ts_delta.nsecs = (msec_delta % 1000000) * 1000000;
            ti = proto_tree_add_time(pdutree, hf_cflow_timedelta, tvb,
                                     offset, length, &ts_delta);
            break;

seems to wrong. The ts_delta.nsecs assignment should be:

            ts_delta.nsecs = (msec_delta % 1000000) * 1000;

Note that msec_delta is in microseconds and hence multiplying by 1000 gives you
nanoseconds. I assume this is a cut'n'paste bug from flowDura.tionMilliseconds


You are receiving this mail because:
  • You are watching all bug changes.