Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 3540] incorrect timestamps in netscaler capture file format

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3540





--- Comment #19 from Ravi Kondamuru <ravikondamuru@xxxxxxxxx>  2009-11-18 06:41:23 PDT ---
Created an attachment (id=3974)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3974)
The new format v23 file with timestamps around 2009-11-18 06:08:00

Hi Stig,
I am attaching a file with format v23 containing the 64bit time stamp. This
timestamp is the number of nanoseconds since epoch.
I tried your fix with the above trace files and as you expected shows in
correct times. It should show around 2009-11-18 06:08:00. It is showing varying
times around 1994, 2025 etc.
Reversing the order worked. I am compiling on windows 7, 32bit OS.

C:\Users\ravik\Documents\src\wireshark\trunk>svn diff wiretap\netscaler.c
Index: wiretap/netscaler.c
===================================================================
--- wiretap/netscaler.c (revision 31002)
+++ wiretap/netscaler.c (working copy)
@@ -774,7 +774,7 @@
 #define TIMEDEFV23(fp,type) \
        do {\
                /* access _AbsTimeHighHdr as a 64bit value */\
-               nsg_creltime = (((guint64)fp->type##_AbsTimeHighHdr<<32) |
(fp->
type##_AbsTimeLowHdr));\
+               nsg_creltime = (((guint64)fp->type##_AbsTimeLowHdr<<32) |
(fp->t
ype##_AbsTimeHighHdr));\
                wth->phdr.ts.secs = (guint32) (nsg_creltime / 1000000000);\
                wth->phdr.ts.nsecs = (guint32) (nsg_creltime % 1000000000);\
        }while(0)


thanks,
Ravi.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.