Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] Re: some netxray traces off by time factor

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Kevin Johnson <kjohnson@xxxxxxxxxxxxxxx>
Date: Sat, 23 Jul 2005 09:39:31 -0400
On Fri, 2005-07-22 at 11:15 -0600, Matt Jibson wrote:
> Attached is a patch that fixes the problem without breaking other
> traces of the same type. I tested with 2-3 traces of each type,
> generated from different sources. It appears that if hdr.realtick (or
> timeunit) == 3579545 and hdr.timeunit == 0, then "timeunit =
> TpS[hdr.timeunit]" should happen.
> 
> Noone has replied to this thread yet. Should I mail guy offlist, since
> he is probably the appropriate contact? I'm assuming he would have
> many more traces to test this against to make sure it doesn't have
> unintentional breakage.
> 
> -Matt Jibson

I will try to look at this today.  I have been pretty busy with the BASE
project but should have some time.

Thanks
Kevin


---------------------
BASE Project Lead
http://sourceforge.net/projects/secureideas
http://base.secureideas.net
The next step in IDS analysis!

Attachment: signature.asc
Description: This is a digitally signed message part