Joerg Schumacher <[EMAIL PROTECTED]> writes: > Hi! > > I'm using libpcap-0.6.2 on a linux 2.2.19 kernel machine. The > packet timestamps are sometimes jumping back: > > 02:51:20.084645 [...]: . ack 2840939448 win 32120 (DF) > 02:51:20.084360 [...]: . ack 3279847247 win 17424 (DF) > 02:51:20.084993 [...]: . ack 744835904 win 8930 (DF) > > Is this normal behaviour? I see these jumps for about 2-3% of the packets. > clock is synchronized via ntp.
Does this happen if NTP is shut down? If your system clock is jittery, NTP could be correcting the clock backwards periodically to make up for it, which could cause the weirdness you're seeing... ----ScottG. - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
