Wireshark-bugs: [Wireshark-bugs] [Bug 7048] New: pcap-ng Interface Statistics block writes wrong
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 9 Apr 2012 05:50:31 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7048

           Summary: pcap-ng Interface Statistics block writes wrong
                    timestamps
           Product: Wireshark
           Version: 1.7.x (Experimental)
          Platform: x86-64
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: jasper.bongertz@xxxxxxxxxxxx


Build Information:
Version 1.7.2-SVN-41986 (SVN Rev 41986 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.22.1, with Cairo 1.10.2, with Pango 1.28.3, with
GLib 2.26.1, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with PortAudio
V19-devel (built Apr  8 2012), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 21022
--
When saving to pcap-ng format, Wireshark writes Interface Statistics blocks
including start and end timestamps (called isb_starttime and isb_endtime in the
official file format documentation) to the capture file. 

Unfortunately, the values for these high and low timestamps are written in the
wrong order, with low first instead of high. All other timestamps (for enhanced
packet blocks etc.) seem to be written correctly.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.