That timestamp (64dad964) starts and end with a 64 byte so it passes the check in: https://gitlab.com/wireshark/wireshark/-/blob/master/epan/dissectors/packet-icmp.c#L1741
Please open an issue on the Wireshark Gitlab issues page ( https://gitlab.com/wireshark/wireshark/-/issues/) including the text from your email and the two attached files. On Wed, Aug 16, 2023 at 9:07 AM Stefan Kleedehn <s...@kleedehn.de> wrote: > Hello all, > > I have attached a pcap with 6 icmp echo requests. In frame 5 the > icmp.data_time is wrong. It looks to me that the order of the hex value > of the icmp.data_time field in frame 5, is interpreted incorrectly. For > the other values it looks fine. > > > Many greetings, > > > Stefan___________________________________________________________________________ > Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> > Archives: https://www.wireshark.org/lists/wireshark-dev > Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev > mailto:wireshark-dev-requ...@wireshark.org > ?subject=unsubscribe >
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
