Hello all, I'm having an issue with the PF_RING tcpdump program reporting an incorrect timestamp. My kernel's timestamp reports my correct time via 'date' (1) but the tcpdump program included with PF_RING shows a time much different. e.g. at 10 a.m. (correct time), the pf_ring tcpdump reports at timestamp of 2:00 p.m. (14:00).
If I run the original tcpdump program, as compiled from the sources on tcpdump.org, it reports the correct time. If I run a version of ngrep with PF_RING support it reports the correct timestamp. The problem seems to be with tcpdump. System is Linux: Ubuntu Server 11.04, kernel 2.6.38-13, Intel cards that use the e1000 driver. PF_RING 5.2.2, transparent_mode=0 Anyone else experienced this? Any idea on how to fix this? Thanks Jon _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
