Ethereal-users: Re: [Ethereal-users] Frames and timestamps

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 29 Mar 2006 00:34:56 -0800
David L�pez P�rez wrote:


Why  the frames and the timetamps aren't in the same order?

For example, in this figure:
Why  the frame 38 is before in time than the frame 39?
 -- frame 38 --> 4.781393s
 -- frame 39 --> 4.781360s
Because some OSes apparently have the annoying habit of not delivering packets to the mechanism used by libpcap in the order in which they're time-stamped (note that the time at which a packet is time-stamped could be different from the time at which it arrived at the host's network adapter). 

(Is this Linux?  Is it on a multiprocessor machine?)