You and Guy Harris are exactly correct :)
I had the computers both set to the same time, but different timezones
so the timestamps were correct on the sensor, but were interpreted wrong
on the analyzer.
Thanks again!
Brad
-----Original Message-----
From: Michael Richardson [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 01, 2001 10:54 PM
To: Henry, Brad ERM
Cc: [EMAIL PROTECTED]
Subject: Re: [tcpdump-workers] problem with timestamps
The difference in timestamp (6 hours) seems to correspond exactly to the
distance that Saskatoon is from UTC.
My bet is that $TZ and/or /etc/localtime is not set correctly on idsroot.
] Train travel features AC outlets with no take-off restrictions|gigabit is
no[
] Michael Richardson, Solidum Systems Oh where, oh where has|problem
with[
] [EMAIL PROTECTED] www.solidum.com the little fishy gone?|PAX.port
1100[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");
[
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
