Ethereal-users: Re: [Ethereal-users] Frames and timestamps

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 29 Mar 2006 00:34:56 -0800
David López Pérez wrote:


Why  the frames and the timetamps aren't in the same order?

For example, in this figure:
Why  the frame 38 is before in time than the frame 39?
 -- frame 38 --> 4.781393s
 -- frame 39 --> 4.781360s
Because some OSes apparently have the annoying habit of not delivering packets to the mechanism used by libpcap in the order in which they're time-stamped (note that the time at which a packet is time-stamped could be different from the time at which it arrived at the host's network adapter). 

(Is this Linux?  Is it on a multiprocessor machine?)