Wireshark · Ethereal-users: Re: [Ethereal-users] Bogus Timestamps in .ENC capture

[Ulf Lamping <ulf.lamping@xxxxxx>]

Feeny, Michael (TD&DS, Applications Infrastructure Svcs.) wrote:

> It seems I have seen this before, but I’ve never seen it discussed, so 
> I’ll ask here…
>
> When I read a .ENC file with Ethereal, the timestamps are INcorrect 
> (wrong date, wrong time). When I reformat that same capture file as a 
> .DMP file, the timestamps shown by Ethereal are all correct.
>
> Has anyone else seen this?
>
> In this particular instance, the source of these .ENC and .DMP files 
> is a NetScout nGenius probe. After the capture file has been stored by 
> nGenius, I can save it as either a .ENC or a .DMP file. I first saved 
> it as a .ENC, and then opened it with Ethereal. The timestamps were in 
> the future.
>
> I then saved the same capture file as a .DMP, opened with Ethereal, 
> and all the timestamps are correct.
>
> I’m running Ethereal 0.10.12.
I don't know about this issue myself.

You may file a bug report on this: http://bugs.ethereal.com/bugzilla/

If possible, please include a sample capture file and some output which 
makes it clear how it should look like.

Regards, ULFL