Re: [Wireshark-dev] Clearly, someone thought no one should be using CommView after 2038

2021-04-18 Thread Guy Harris
On Apr 18, 2021, at 10:18 PM, Eugène Adell  wrote:

> probably the guy writing this considered the "Epochalypse" problem.

Or wanted *some* test to help rule out files that are probably not ConnView NCF 
files (there is no file header, so there's no file magic number, and there's no 
packet magic number, either, so you can't just test that to check whether the 
file is an NCF file or not), and went with "make sure year is < 2038 because 
the 32-bit signed time epoch issue makes it an "obvious" choice.

It'd might still be useful to have *some* value there, to keep the heuristic 
reasonably strong, but maybe we should pick a bigger number.  (If, as per 
Richard's comment on my merge request:


https://gitlab.com/wireshark/wireshark/-/merge_requests/2762#note_554424206

Tamosoft may be considering switching to pcapng, if they do, perhaps we could 
use the year in which they do so plus 100, or something such as that.)

___
Sent via:Wireshark-dev mailing list 
Archives:https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] Clearly, someone thought no one should be using CommView after 2038

2021-04-18 Thread Eugène Adell
Hello,

probably the guy writing this considered the "Epochalypse" problem.
See https://en.wikipedia.org/wiki/Year_2038_problem if necessary.

best regards
E.A.

Le lun. 19 avr. 2021 à 04:18, Richard Sharpe
 a écrit :
>
> Hi folks,
>
> I just came across this validation check in the commview wiretap code:
>
> if (... cv_hdr.year < 1970 || cv_hdr.year >= 2038 || ...)
>
> --
> Regards,
> Richard Sharpe
> (何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)
> ___
> Sent via:Wireshark-dev mailing list 
> Archives:https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>  mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
___
Sent via:Wireshark-dev mailing list 
Archives:https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

[Wireshark-dev] Clearly, someone thought no one should be using CommView after 2038

2021-04-18 Thread Richard Sharpe
Hi folks,

I just came across this validation check in the commview wiretap code:

if (... cv_hdr.year < 1970 || cv_hdr.year >= 2038 || ...)

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)
___
Sent via:Wireshark-dev mailing list 
Archives:https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe