Fwd: Why the pcap file time different with argus file?

[Rahimeh Khodadadi]

But I have red the ra document. when I use ra command the time is ok, just
using rasqlinsert it is changed?
Please tell me know the reason ??


On Tue, Jul 16, 2013 at 2:59 PM, Carter Bullard <carter at qosient.com> wrote:

> I'm very sorry, but your questions are so simple that it is clear that you
> do not understand the tools.  Please read the man page for ra() before
> asking any other questions !!!!
>
>    % man ra
>
>
>
> Sent from my iPad
>
> On Jul 16, 2013, at 5:33 AM, Rahimeh Khodadadi <
> rahimeh.khodadadi at gmail.com> wrote:
>
> I forgot to say, when I insert the data to mysql or excel the time is
> changed. I saw the rarc file the config for time is : %T.%f
> Why it happened???
>
> ---------- Forwarded message ----------
> From: Rahimeh Khodadadi <rahimeh.khodadadi at gmail.com>
> Date: Tue, Jul 16, 2013 at 1:11 PM
> Subject: Why the pcap file time different with argus file?
> To: "argus-info at lists.andrew.cmu.edu" <argus-info at lists.andrew.cmu.edu>
>
>
> Hi all,
>
> I capture traffic with wireshark then covert that to flow by Argus. When I
> see both of them, I found that the time of them are diffrent.
>
> Why and What do I do for slove it??
>
> whireshark  time                                 stime argus
> 12.868672000                                  1373487478.2456
>
>
>
>
> --
> With Best Regards
> Rahimeh Khodadadi
>
>
>
>
> --
> With Best Regards
> Rahimeh Khodadadi
>
>


-- 
With Best Regards
Rahimeh Khodadadi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20130716/0638b97a/attachment.html>