Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7048

Write timetamps for the interface statistic blocks the way specified
by http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html


svn path=/trunk/; revision=42080

1 files changed, 12 insertions, 2 deletions

diff --git a/pcapio.c b/pcapio.c
index 388a6cb62b..d399606fb1 100644
--- a/pcapio.c
+++ b/pcapio.c
@@ -698,16 +698,26 @@ libpcap_write_interface_statistics_block(FILE *fp,
         }
 
         if (isb_starttime !=0) {
+                guint32 high, low;
+
                 option.type = ISB_STARTTIME;
                 option.value_length = sizeof(guint64);
+                high = (guint32)((isb_starttime>>32) & 0xffffffff);
+                low = (guint32)(isb_starttime & 0xffffffff);
                 WRITE_DATA(fp, &option, sizeof(struct option), *bytes_written, err);
-                WRITE_DATA(fp, &isb_starttime, sizeof(guint64), *bytes_written, err);
+                WRITE_DATA(fp, &high, sizeof(guint32), *bytes_written, err);
+                WRITE_DATA(fp, &low, sizeof(guint32), *bytes_written, err);
         }
         if (isb_endtime !=0) {
+                guint32 high, low;
+
                 option.type = ISB_ENDTIME;
                 option.value_length = sizeof(guint64);
+                high = (guint32)((isb_endtime>>32) & 0xffffffff);
+                low = (guint32)(isb_endtime & 0xffffffff);
                 WRITE_DATA(fp, &option, sizeof(struct option), *bytes_written, err);
-                WRITE_DATA(fp, &isb_endtime, sizeof(guint64), *bytes_written, err);
+                WRITE_DATA(fp, &high, sizeof(guint32), *bytes_written, err);
+                WRITE_DATA(fp, &low, sizeof(guint32), *bytes_written, err);
         }
         if (stats_retrieved) {
                 /* */