unexplainable time jumps

The sniff file has the right timestamp in the file name and on the OS after writing. But in the sniff file ever 20 min. the time jump back. The OS has the right time. There is no NTP how change time or make trouble. Ideas?

time

asked 06 May '11, 05:46

chofmann
1●1●1●1
accept rate: 0%

Do you know the hardware time source being used by the OS? The TSC time source with some CPU implementations is known to have unacceptable clock drift rates up in the OS...google "hardware time source tsc"

(29 Jul '11, 08:06) ivanh

One Answer:

oldest newest most voted

-the DNS-Server work right
-no NTP server installed
-no other program is installed how use the winpcap library
-OS time is right
-latest wireshark and winpcap program is installed

Maybe its a winpcap bug.
A new trace file created with "Mircosoft Network Monitor 3.3" on the same server has no time jumps.
Under specific circumstances this phenomenon appears on a win server.

link

answered 29 Jul '11, 06:36

chofmann
1●1●1●1
accept rate: 0%

edited 29 Jul '11, 08:22

joke
1.2k●3●7●29

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

time ×30

Asked: 06 May '11, 05:46

Seen: 1,086 times

Last updated: 29 Jul '11, 08:22

unexplainable time jumps

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions