Velissarios Lataris wrote:
I went through the documentation but didn't find anything that would
explain why timestamps on the wanport capture have earlier times by 1min
than that of machine.
On what operating system are you capturing the traffic?
Does "WANport" refer to a brand name of a product, or to a generic WAN port?
Is the port configured as a regular network device, or is this, for
example, capturing on a generic WAN port with a DAG card?
What happens if you capture on the port with tcpdump/WinDump?
