Hello, On Sat, 2006-10-14 at 21:42 +0000, ronnie sahlberg wrote: > In the example capture unplug_mouse2.cap > it appears that the timestamp for the packet is not generated properly. > All packets show up as JAN 1 1970. > > 1, Can you have a look at the timestamp generation of packets when capturing.
The issue is that current kernel code provides the timestamp compressing a struct timeval in only 32 bits; 8 bits for tv_sec field and 24 for tv_usec. There is some buzz on the lkml to update the usbmon module; perhaps this is going to be fixed. > 2, Can you provide some more example captures we can use to continue > to refine the dissector? > I would be interested in a capture that contains traffic when a memory > stick is attached and a file is created/written to the memory stick > so I can see all layers that need to be implemented before we can plug > it into the current SCSI dissector. I'll provide new capture samples ASAP. Not too soon, because until Wednesday I will be busy. > 5, Can you also provide example captures with bluetooth and the new > libpcap file format? > (and a patch to wireshark to read these new files) There is no new libpcap format. The only think new is the data link type (DLT_BLUETOOTH_H4). A libwritetap patch has been yet merged to support this data link type, so Wireshark will read the bluetooth dump with no additional patch. Best regards, Paolo _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
