Wireshark-bugs: [Wireshark-bugs] [Bug 2387] New: Setting a time reference causes the first packe
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 26 Mar 2008 16:13:57 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2387

           Summary: Setting a time reference causes the first packet to be
                    counted twice in the cum bytes field.
           Product: Wireshark
           Version: 0.99.8
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: adam.wright@xxxxxx
                CC: adam.wright@xxxxxx


Build Information:
Version 0.99.8 (SVN Rev 24492)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 7.0, with SMI 0.4.5, with ADNS, with Lua 5.1,
with
GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio V19-devel,
with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
When a time reference is set the cumulative byte counters reset to zero
starting at the frame where the toggle was set.  That frame has a correct
cumulative byte count.  However, the cumulative byte count is off by X where X
equals the number of bytes in the first frame of the time reference.  

For example, if the first frame of the time reference has 488 bytes its
cumulative byte count is 488 but the second frame of 489 bytes has a cumulative
byte count of 1465 (488+488+489).  It should be 977 (488+489).

I have been able to reproduce this on multiple capture files as well as on
version 0.99.5.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.