Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6703] ZEP dissector: Timestamp not always displayed correc

Date: Thu, 16 Feb 2012 19:31:35 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6703

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-02-16 19:31:33 PST ---
The 2nd (time not representable) problem is a problem with your OS's time
routines.  Wireshark takes the NTP time and converts it into a time_t and uses
the OS-provided routines to display it.  But with a 32-bit time_t (which is
normally the size of the structure on 32-bit OS's) the earliest displayable
time is in 1901[1].

http://en.wikipedia.org/wiki/Unix_time#Representing_the_number

I did fix the ZEP dissector's display of the seconds (which, BTW, are seconds
since 1970, not the raw NTP's time) so it doesn't try to display the signed
seconds field as unsigned (which was yielding, for these times on a 64-bit OS,
very very large positive numbers instead of only mildly large negative
numbers).

But there's not much else we can do for this.  Upgrading to a 64-bit OS (that
has a 64-bit time_t) would help, of course ;-).  (FWIW, yes, these times
display fine for me on 64-bit Linux.)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.