| Bug ID |
10440
|
| Summary |
NTP timestamp decoding
|
| Product |
Wireshark
|
| Version |
1.12.0
|
| Hardware |
x86
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Look at the attached screen shot. The 6 bytes for "Original Timestamp" fields
are, starting from offset 0x42:
00 00 0E 10 00 00 00 00
The first 4 bytes supposed are seconds, the last 4 bytes are "Fractions".
0x0e10 is 3600 decimal. This date is an hour from the "beginning of time". The
Timestamp value should be 1900:01:01 01:00:00. It isn't. See the attached
screen shot.
You are receiving this mail because:
- You are watching all bug changes.
