Wireshark-bugs: [Wireshark-bugs] [Bug 12349] New: PCAPng ISB timestamps written incorrectly
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 19 Apr 2016 10:14:51 +0000
Bug ID 12349
Summary PCAPng ISB timestamps written incorrectly
Product Wireshark
Version 2.1.x (Experimental)
Hardware x86-64
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Capture file support (libwiretap)
Assignee bugzilla-admin@wireshark.org
Reporter jasper@packet-foo.com 

Build Information:
Version 2.1.0-2677-g6b963e9 (v2.1.0rc0-2677-g6b963e9 from master)
--
Wireshark saves the Interface Statistics Block start and end timestamp options
incorrectly. According to the PCAPng specifications they're stored as 2 32bit
values (with endianess), but libwiretap starting with 2.1.x seems to store them
now as a single 64bit value (with endianess), which isn't correct. 

dumpcap 2.1.x stores the values correctly, but loading a PCAPng file and saving
it in Wireshark breaks the values.

See also https://www.wireshark.org/lists/wireshark-dev/201604/msg00147.html

You are receiving this mail because:
  • You are watching all bug changes.