Wireshark-bugs: [Wireshark-bugs] [Bug 10440] New: NTP timestamp decoding
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 02 Sep 2014 21:19:11 +0000
Bug ID 10440
Summary NTP timestamp decoding
Product Wireshark
Version 1.12.0
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter michael.sukhar@gmail.com 

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Look at the attached screen shot. The 6 bytes for "Original Timestamp" fields
are, starting from offset 0x42:

00 00 0E 10 00 00 00 00

The first 4 bytes supposed are seconds, the last 4 bytes are "Fractions".
0x0e10 is 3600 decimal. This date is an hour from the "beginning of time". The
Timestamp value should be 1900:01:01 01:00:00. It isn't. See the attached
screen shot.

You are receiving this mail because:
  • You are watching all bug changes.