From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 83C92A00C3; Fri, 14 Jan 2022 17:15:53 +0100 (CET) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 0093F4115C; Fri, 14 Jan 2022 17:15:53 +0100 (CET) Received: from mail-pj1-f49.google.com (mail-pj1-f49.google.com [209.85.216.49]) by mails.dpdk.org (Postfix) with ESMTP id 7F6934115A for ; Fri, 14 Jan 2022 17:15:51 +0100 (CET) Received: by mail-pj1-f49.google.com with SMTP id r16-20020a17090a0ad000b001b276aa3aabso22535482pje.0 for ; Fri, 14 Jan 2022 08:15:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=networkplumber-org.20210112.gappssmtp.com; s=20210112; h=date:from:to:cc:subject:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=KI2PDxttfaZn4R/XpqT3Mq0Fur7FWFQ4xhCS/RdM/xE=; b=8CHD9sSnfDAsjWO+6ZWAZN3w1HWlxJcLJXZOTE5tJwhxx5NgbFtaPNzUjBmuDDyLW3 S7fsCnK++hMlwNIewIUDVruzPuZqgGIQGmglgVmkLcpxkAVpHoWIuFd6aQ5Rjl4Cy0nD S86Q12LKSpuR5K4kMs3OuY66aHjEce0QHzkYq+dfZs1gdDPcu/X9YFvXqhFvmo165vkx k8NGeYj5W0cZfqZ4tXTXmzb/Yus58t3yX6I+TGThUe766KwMaCpm9IKW6/+06jfu7J1U z5pk9k1jPsVAvrW4n4S84FRUVdeLRwCcSpWMVWjXDxGJ8Of+x1IIJ2zYD2ioO9tLqdcI SLXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=KI2PDxttfaZn4R/XpqT3Mq0Fur7FWFQ4xhCS/RdM/xE=; b=EyJdvHlEB2+egyMypnl8Pc4PnUhD/c5gHSAOs74GAUXxn7VJTIgnHIvqSM6kX0o7CP 0YoCRDYVfbMi85n1rQJ1yCUWPPZG3uS3IajIX5aA7VHWkWRuSIWymqF0e2NgHaONcv6I wYaGrOLsLG2U8t2ypRxSDHwB8ehDgf52Mwyz1MVCaE3noWLosNrbYnPaUNo2+vjYR+uF MI/m6B0nSd6B1/H6bAhk7lX/tTvsoGKlZDeF0ySChYH94SNmpPZp0UDR5pvUYeJd+bzZ j0TCo+pkh4MQNf+BCWRYYSBjTQI2qgEsWuy5/KJxssflLDUKOJU6C3t4YyU33VIX9QJU hzeg== X-Gm-Message-State: AOAM531NpXdtaT6e7JvcWD4uwnWaJZCH5sRYDRxjAm0SQENfZucTh+0J zIvHq/fnIJYWKuDYrpwj37aZzA== X-Google-Smtp-Source: ABdhPJyrw0/5S+TLGvoACqkT/f5OoB2LDoeJlyICoS5jlPVKgyH1YBoM7EfXlRhvTOYC2YG9tSH2zA== X-Received: by 2002:a17:902:ee4c:b0:14a:436e:56d7 with SMTP id 12-20020a170902ee4c00b0014a436e56d7mr9914268plo.169.1642176950378; Fri, 14 Jan 2022 08:15:50 -0800 (PST) Received: from hermes.local (204-195-112-199.wavecable.com. [204.195.112.199]) by smtp.gmail.com with ESMTPSA id r10sm6196887pff.120.2022.01.14.08.15.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 14 Jan 2022 08:15:49 -0800 (PST) Date: Fri, 14 Jan 2022 08:15:47 -0800 From: Stephen Hemminger To: Ben Magistro Cc: dev@dpdk.org, ben.magistro@trinitycyber.com Subject: Re: dumpcap w/ pcapng produces out of order/negative times Message-ID: <20220114081547.2ebce3b2@hermes.local> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org On Thu, 13 Jan 2022 21:38:06 -0500 Ben Magistro wrote: > While utilizing dumpcap with our app, we have observed the captured file > producing out of order timestamps to include negative times. We are still > investigating the root cause but believe it is in lib/pcapng. While doing > some testing of this issue, this behavior was not observed with pcap. In > the attached pcap, there are 5 streams (same curl multiple times a few > seconds apart), with streams 1 and 3 showing oddities. Specifically, > stream 1 is in the future relative to the packet order and stream 3 has a > negative time. > > Not sure if the pcap file will actual post/attach, if it doesn't will try > something. > > System: CentOS7 + devtoolset 9 > DPDK: v21.11 The library hast convert from TSC (cpu clock) to nanoseconds since 1/1/1970 The function pcapng_init computes the offset.