[Snort-users] Odd time stamps On a Alpha

Fyodor fygrave at ...121...
Thu Mar 29 12:09:29 EST 2001


On Thu, Mar 29, 2001 at 10:03:16AM -0500, Chris N. wrote:
> This wrong
> 
> 03/29-04:38:16.000070 0:10:7B:77:8F:FA -> 0:60:8:9C:3:2D type:0x800 len:0x46
> 04/11-22:31:20.000070 0:10:7B:77:8F:FA -> 0:60:8:9C:3:2D type:0x800 len:0x46
> 10/24-13:14:35.000070 0:10:7B:77:8F:FA -> 0:60:8:9C:3:2D type:0x800 len:0x46

Ouch, this looks completely bogus, does tcpdump show right timings as well?
Because we take time of capture from libpcap (which probably receives it from
the kernel), so I am kinda curious if either of these causes such a mess.





More information about the Snort-users mailing list