Timestamp from icmp data is incorrect in Wireshark v4.0.7-0-g0ad1823c
Hello all,
I have attached a pcap with 6 icmp echo requests. In frame 5 the icmp.data_time is wrong. It looks to me that the order of the hex value of the icmp.data_time field in frame 5, is interpreted incorrectly. For the other values it looks fine. I am using a Linux iputils ping and pinging different hosts for days. The decision whether to interpret big-endian or little-endian is decided per frame. And there are just different guesses. It would be nice if there was an option to configure this in the Protocol Preferences. Or the value for BE and LE is displayed, similar to icmp.ident. Maybe there is someone who can and wants to implement this suggestion.
Many greetings,
Stefan
hex-dec-epoch.txtPing-Timestamp.pcapng
Wireshark-dev email list discussion