Ethereal-dev: Re: [ethereal-dev] Re: Summary page for ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 15 Jun 1999 15:26:12 -0700 (PDT)
> BTW, by testing the summary feature, I found out that I have two NetMon
> traces whose last packet get a delta time of a negative # of seconds,
> thereby making the Elapsed Time field in the summary very very large.

Oh, yes, *those* guys.

NetMon has a weird tendency to put out, as the last packet in a capture,
a packet with a start-of-capture-relative time stamp of 0, and a
link-layer packet type of some oddball SNAP type.  It doesn't do so all
the time, but I've seen a number of captures of that sort.

I've yet to figure out what's going on.

Yes, NetMon displays it in that fashion; it doesn't appear that we're
misreading the capture, unless the versions of NetMon that I've used
misread it in the same fashion.