Wireshark-bugs: [Wireshark-bugs] [Bug 3368] The timestamp line in a RTP or RTCP packet display's
Date: Sun, 7 Oct 2012 23:27:21 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3368

--- Comment #4 from Jaap Keuter <jaap.keuter@xxxxxxxxx> 2012-10-07 23:27:20 PDT ---
RFC 3550 says:
"
   Wallclock time (absolute date and time) is represented using the
   timestamp format of the Network Time Protocol (NTP), which is in
   seconds relative to 0h UTC on 1 January 1900 [4].
"

While the 'normal' time conversion routines use 1-1-1970 as epoch. That's a
difference of 70 years, which results in... 2208988800UL seconds.
You cannot assume the sample capture has the correct timestamp on it.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.