[Oisf-users] Log entry timestamp question

Michael Stone mstone at mathom.us
Fri Dec 29 14:15:51 UTC 2017


On Thu, Dec 28, 2017 at 03:59:55PM -0700, James Moe wrote:
>  No. There is a feature request
><https://redmine.openinfosecfoundation.org/issues/1469> that addresses
>this issue.

That's something different. I think the timestamp weirdness (bogus
milliseconds) is an artifact of the napatech cards. (Ironically, because 
they support high precision timestamping.) Steve, did you follow the 
instructions at 
http://suricata.readthedocs.io/en/latest/capture-hardware/napatech.html
(specifically, the part about TimeSyncReferencePriority)?

Mike Stone



More information about the Oisf-users mailing list