[Winpcap-users] wireshark timing issue on server side

[tfcrowe at eircom.net]

Can anyone shed some light on why I'm getting these timestamps which don't seem to make sense ...

Scenario: Client and server windows boxes. Latest wireshark installed on each. Tried simple file upload using filezilla from client to server. Server is a hosted box (probably virtualized environment) but I have taken account of this fix http://www.winpcap.org/pipermail/winpcap-bugs/2010-January/001153.html. Client connection goes out over office lan so I'm assuming wired connection all the way to the server.

Issue: During the FTP setup protocol, the PORT request received on the server has the same timestamp as the previous ftp request ("TYPE A"). How could this be?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: WiresharkServerTiming.jpg
Type: image/jpeg
Size: 139702 bytes
Desc: not available
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20101221/beac5bef/attachment-0001.jpg>