Wireshark-dev: Re: [Wireshark-dev] pcap-ng support
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 19 Feb 2008 01:11:41 -0700
On Mon, Feb 18, 2008 at 02:28:58PM -0800, Gianluca Varenni wrote:

> I think there is something weird going on. I'm using rev 24375
> 
> I captured a bunch of ethernet packets, when I ask to save the file in 
> pcap-ng format, the timestamps on the screen become all the same 
> (1969-12-31 16:00:00.000000).
> 
> I checked with my other tool, but unfortunately it only reads captures 
> with nanosecond precision. So I checked with an hex editor, and the 
> timestamp on the packets (well, at least the first packet) is 0.

Oops, thanks for catching that.  I see the same behavior on my machine 
now.  I'll work on a fix ASAP.


Steve