Ethereal-dev: RE: [Ethereal-dev] Ethereal time problem with Sniffer Pro 4.50.04 files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Sheinin, Oleg" <Oleg.Sheinin@xxxxxxxxx>
Date: Tue, 11 Dec 2001 17:30:26 +0200
The version is 002.002 and timeunit is 2.
When time unit is 0 the times are match exactly.
We have two alternatives:
	1. the TpS for timeunit 2 is wrong
	2. the TpS depends on media speed too

What is your opinion?
Oleg Sheinin, 

> -----Original Message-----
> From: Guy Harris [mailto:gharris@xxxxxxxxx]
> Sent: Monday, December 10, 2001 1:58
> To: Sheinin, Oleg
> Cc: ethereal-dev@xxxxxxxxxxxx
> Subject: Re: [Ethereal-dev] Ethereal time problem with Sniffer Pro
> 4.50.04 files
> 
> 
> On Sun, Dec 09, 2001 at 01:11:46PM +0200, Sheinin, Oleg wrote:
> > As I can guess the time differences is exactly triple, when 
> captures is made
> > at 100BaseT media.
> > The media speed can be found in the capture header structure.
> 
> Yes, but that doesn't mean that the media speed is what Wiretap should
> check.
> 
> There's also:
> 
> > /* NetXRay file header (minus magic number). */
> > struct netxray_hdr {
> 
> 	...
> 
> >  guint8 timeunit; /* encodes length of a tick */
> 
> ...
> 
> Ethereal 0.8.20 checks that field if the file has a version number of
> 002.001 or 002.002; what's the version number of the files 
> and, if it's
> 002.001 or 002.002, what's the value of the "timeunit" field?
>