Fwd: Why the pcap file time different with argus file?

[Carter Bullard]

I'm very sorry, but your questions are so simple that it is clear that you do not understand the tools.  Please read the man page for ra() before asking any other questions !!!!

   % man ra



Sent from my iPad

On Jul 16, 2013, at 5:33 AM, Rahimeh Khodadadi <rahimeh.khodadadi at gmail.com> wrote:

> I forgot to say, when I insert the data to mysql or excel the time is changed. I saw the rarc file the config for time is : %T.%f
> Why it happened???
> 
> ---------- Forwarded message ----------
> From: Rahimeh Khodadadi <rahimeh.khodadadi at gmail.com>
> Date: Tue, Jul 16, 2013 at 1:11 PM
> Subject: Why the pcap file time different with argus file?
> To: "argus-info at lists.andrew.cmu.edu" <argus-info at lists.andrew.cmu.edu>
> 
> 
> Hi all,
> 
> I capture traffic with wireshark then covert that to flow by Argus. When I see both of them, I found that the time of them are diffrent.
> 
> Why and What do I do for slove it??
> 
> whireshark  time                                 stime argus
> 12.868672000                                  1373487478.2456
>                 
> 
> 
> 
> -- 
> With Best Regards
> Rahimeh Khodadadi
> 
> 
> 
> 
> -- 
> With Best Regards
> Rahimeh Khodadadi
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130716/13be7c09/attachment.html>