Jim Mellander <jmellan...@lbl.gov> wrote: Jim> Hi:
Jim> On tcpdump 4.1.1, printing from a saved standard format pcap Jim> file: Jim> $ tcpdump -nn -tt -s 0 -r 128.XX.XX.197.icmp.trace |head -3 Jim> reading from file 128.XX.XX.197.icmp.trace, link-type EN10MB Jim> (Ethernet) 18:45:55.966123176 IP 128.XX.XX.197 > Jim> (Ethernet) 18:45:55.966123552 IP 128.XX.XX.197 > That sure is odd. My guess is that we aren't initializing (zeroing) the lower bits of the microsecond part of the tv_usec field. most of the regression tests run without time stamps... _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers