Can displaying root dispersion of NTP packets be extended?
Actually the root dispersion is only displayed wit 4 digits after the decimal point, i.e. 0.1 ms resolution. However, modern NTP servers may provide a better root dispersion. E.g., if only the LSB in the scaled integer of an NTP packet is set then this means ~15 microseconds (0.000015 s) root dispersion, but this is currently displayed as 0.0000 s, even though the value is not 0.
The relevant piece of code seems to be
proto_tree_add_double(ntp_tree, hf_ntp_rootdelay, tvb, 4, 4, rootdelay);
in function dissect_ntp_std()
in file dissectors/packet_ntp.c.
I tried to add this as a feature request to bugzilla, but was unable to register with bugzilla. :-(