jonschipp at gmail
Mar 12, 2012, 7:24 AM
Views: 570
Permalink
|
|
PF_RING tcpdump, incorrect timestamps
|
|
Hello all,
I'm having an issue with the PF_RING tcpdump program reporting an
incorrect timestamp.
My kernel's timestamp reports my correct time via 'date' (1) but the
tcpdump program included with PF_RING shows a time much different.
e.g. at 10 a.m. (correct time), the pf_ring tcpdump reports at
timestamp of 2:00 p.m. (14:00).
If I run the original tcpdump program, as compiled from the sources on
tcpdump.org, it reports the correct time.
If I run a version of ngrep with PF_RING support it reports the
correct timestamp. The problem seems to be with tcpdump.
System is Linux: Ubuntu Server 11.04, kernel 2.6.38-13, Intel cards
that use the e1000 driver.
PF_RING 5.2.2, transparent_mode=0
Anyone else experienced this? Any idea on how to fix this?
Thanks
Jon
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop
|
PF_RING tcpdump, incorrect timestamps
