Wireshark-bugs: [Wireshark-bugs] [Bug 6114] In detail pane, Timestamp is incorrectly decoded for
Date: Tue, 19 Jul 2011 07:24:45 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6114

--- Comment #11 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-07-19 07:24:43 PDT ---
(In reply to comment #5)
> Created an attachment (id=6674)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6674) [details]
> Heuristically determine endianness of originate, receive and transmit
> timestamps.

... and upon a more closer examination of RFC792, I'm now convinced there is
absolutely no definitive way to determine the endianness of the timestamps:

>From [Page 16] of http://tools.ietf.org/html/rfc792:
      If the time is not available in miliseconds or cannot be provided
      with respect to midnight UT then any time can be inserted in a
      timestamp provided the high order bit of the timestamp is also set
      to indicate this non-standard value.

... so this complicates things further.  I'll upload an updated patch that
takes this into account, but basically there there are even less guarantees
than before that I'll get the actual timestamp right in all cases.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.