Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 3540] incorrect timestamps in netscaler capture file format

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3540





--- Comment #20 from Stig Bjørlykke <stig@xxxxxxxxxxxxx>  2009-11-18 07:08:18 PDT ---
(In reply to comment #19)
> Reversing the order worked. I am compiling on windows 7, 32bit OS.

Ok.  It seems to me that the patch below is more correct, because I read
HighHdr as the high value of the 64bit value and LowHdr as the low value of the
64bit value.



Index: wiretap/netscaler.c
===================================================================
--- wiretap/netscaler.c (revision 31002)
+++ wiretap/netscaler.c (working copy)
@@ -249,8 +249,8 @@
 {
        NSPR_HEADER3B_V22(fp);  /* long performance header */
        guint8  fp_DevNo;       /* Network Device (NIC) number */
+       guint32 fp_AbsTimeLowHdr;       /* High resolution low time */
        guint32 fp_AbsTimeHighHdr; /* Higher value of the absolute time */
-       guint32 fp_AbsTimeLowHdr;       /* High resolution low time */
        guint32 fp_PcbDevNo;    /* PCB devno */
        guint32 fp_lPcbDevNo;   /* link PCB devno */
        guint16 fp_VlanTag; /* vlan tag */
@@ -315,8 +315,8 @@
 {
        NSPR_HEADER3B_V22(pp);  /* long performance header */
        guint8  pp_DevNo;       /* Network Device (NIC) number */
+       guint32 pp_AbsTimeLowHdr;       /* High resolution low time */
        guint32 pp_AbsTimeHighHdr; /* Higher value of the absolute time */
-       guint32 pp_AbsTimeLowHdr;       /* High resolution low time */
        guint16 pp_PktSizeOrg;  /* Original packet size */
        guint16 pp_PktOffset;   /* starting offset in packet */
        guint32 pp_PcbDevNo;    /* PCB devno */


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.