Yes, the exact same packet.

Am 08.06.2016 um 22:40 schrieb Guy Harris:
On Jun 8, 2016, at 1:29 PM, Christian Rupp 
<christian.rupp.stuttg...@freenet.de> wrote:

The Timestamp when tcpdump grabs the package off of the receiver is 36 seconds( 
+/- innaccuracy, here roughly  +/- 5-10 µs) after the timestamp when tcpdump 
grabs the package of the sender.
"The" packet in the sense that you have two tcpdumps, one running on each of 
the servers, and the time stamp for a single given packet captured by the tcpdump on the 
machine that sent it is about 36 seconds earlier than the time stamp for the *exact same* 
packet captured by the tcpdump on the machine that received it?

_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Reply via email to