Wireshark · Wireshark-dev: Re: [Wireshark-dev] [PATCH] USB setup hdr

[Paolo Abeni <paolo.abeni@xxxxxxxx>]

Hello,

On Sat, 2006-10-14 at 21:42 +0000, ronnie sahlberg wrote:
> In the example capture unplug_mouse2.cap
> it appears that the timestamp for the packet is not generated properly.
> All packets show up as JAN 1 1970.
> 
> 1, Can you have a look at the timestamp generation of packets when capturing.

The issue is that current kernel code provides the timestamp compressing
a struct timeval in only 32 bits; 8 bits for tv_sec field and 24 for
tv_usec. There is some buzz on the lkml to update the usbmon module;
perhaps this is going to be fixed.

> 2, Can you provide some more example captures we can use to continue
> to refine the dissector?
> I would be interested in a capture that contains traffic when a memory
> stick is attached and a file is created/written to the memory stick
> so I can see all layers that need to be implemented before we can plug
> it into the current SCSI dissector.

I'll provide new capture samples ASAP. Not too soon, because until
Wednesday I will be busy.

> 5, Can you also provide example captures with bluetooth and the new
> libpcap file format?
> (and a patch to wireshark to read these new files)

There is no new libpcap format. The only think new is the data link type
(DLT_BLUETOOTH_H4). A libwritetap patch has been yet merged to support
this data link type, so Wireshark will read the bluetooth dump with no
additional patch.

Best regards,

Paolo