Ethereal-users: [Ethereal-users] [OT?!?]Erroneous time in some frames/captures

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: stefmit <stefmit@xxxxxxxxxxx>
Date: Thu, 7 Aug 2003 09:48:51 -0500
I was wondering if this was more of a pcap issue ... in any case, here is my 
question: has any one of you ever experienced packet traces where the time 
recorded is fine for the majority of frames, but it is totally off for a few 
of them? Tried this on a couple of Windows 98 machines, with the clock 
properly set, and got something like this (the conversation was filtered to 
two hosts only):

Frame	Time (sec since beginning of capture)
1	0.000	>
2	0.005	<
3	0.02	>
4	0.06	>
....
23	0.355	<
24	120755.887 >
25	0.381	>
26	0.401	<
...
35	0.509	>
36	120756.012 <
37	0.528 >
...

the ratio (no pattern!!) being somewhere between 1 in 8 to 1 in 20 frames with 
time totally off. As I said - I tried this from a couple of Windows 98 
machines, running winpcap 2.3, and ethereal 0.9.12.

Any idea what could cause this, and - mostly - what would be a possible cure?

TIA,
Stef