Ethereal-dev: Re: [ethereal-dev] Re: [ethereal-users] Ethereal crash reading tcpdump '-r' file

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 13 Sep 2000 14:32:32 -0700 (PDT)
Is that "FreeBSD 3.4 on a PC or other x86-based machine" or "FreeBSD 3.4
on an Alpha-based machine"?

If it's the latter, this may be a consequence of the libpcap per-packet
header, in libpcap 0.4, using the native OS's "struct timeval" (0.5
defines a "struct pcap_timeval", with two 32-bit fields, which it uses
in capture files, so that the capture file format *isn't* dependent on
the size of the fields in the native OS's "struct timeval").

A long time ago, I figured out a scheme to determine whether a libpcap
capture file comes from a platform with 32-bit fields in "struct
timeval" or 64-bit fields in "struct timeval"; I'll experiment with that
at home in the next few days.