Hi,
I'm using tcpdump to capture high rate UDP data, and seeing backwards
jumps in the capture time:
1032212836.092160 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092177 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092196 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092214 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092232 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092250 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092268 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
+- 1032212836.092210 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
| 1032212836.092227 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
| 1032212836.092245 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
+- 1032212836.092263 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092280 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092298 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
1032212836.092315 10.0.0.1.32851 > 10.0.0.2.5001: udp 472 (DF)
Is this normal? Seems to happen more at high rates, and I suspect a bug in
the kernel timekeeping, but would appreciate any insights. This is tcpdump
3.7.1 on FreeBSD 4.5; the host is not running NTP.
Colin
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
