Re: Bug in tcpdump -tt timestamps

[Michael Richardson <mcr () sandelman ca>]

Jim Mellander <jmellander () lbl gov> wrote:

    Jim> Hi:

    Jim> On tcpdump 4.1.1, printing from a saved standard format pcap
    Jim> file:

    Jim> $ tcpdump -nn -tt -s 0 -r 128.XX.XX.197.icmp.trace |head -3
    Jim> reading from file 128.XX.XX.197.icmp.trace, link-type EN10MB
    Jim> (Ethernet) 18:45:55.966123176 IP 128.XX.XX.197 >

    Jim> (Ethernet) 18:45:55.966123552 IP 128.XX.XX.197 >

That sure is odd.
My guess is that we aren't initializing (zeroing) the lower bits of the
microsecond part of the tv_usec field. 

most of the regression tests run without time stamps...


_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers