Hi,
I just start to wonder whether the timestamp captured in flow-tool is correct. Since for mojority of the flows in the trace, the average inter packet time ((endtime in a record-start time in a record)/num of packets in this record) is greater than 100ms which does not make sense to me (Since the max RTT is around 220ms, and if I average them through all the packets, it should be much smaller since several packets are sent at the same time. after my averaging, the inter packet time should be several times less than RTT).
I heard that only the ending timestamp is not correct, but I am not sure whether it is refering to the end timestamp of every record or on the last record of the flow.
Thanks!
Express yourself instantly with MSN Messenger! MSN Messenger Download today it's FREE!
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
