OK, in bge0.zip.pcap, frame 73 shows your client setting
the modified time on \temp\iexplore.PNG it just created.
In bge0.rar.pcap, the equivalent operation is frame 87,
and the modified time looks the same. But then, the
application writes to the same FD, which presumably
updates the modified ti
Are you sure you capture all of the relevant traffic in both tests?
In the "zip" test (which works as you expect?) I don't see any
SMB operations setting the file timestamp (on iexplore.PNG?)
In the "rar" test, I don't see any files extracted at all. Hmm...
On Mon, Dec 19, 2011 at 8:30 AM, Nilsen
