<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">This looks like its a timestamp rollover maybe.. in other places this happens, whats the timestamp before and after?<div><br></div><div>in this case, before: <span style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; ">32320, after: 480 (marker bit set).</span></div><div><font face="times new roman, new york, times, serif"><span style="font-size: 16px;"><br></span></font></div><div><font face="times new roman, new york, times, serif"><span style="font-size: 16px;">Mike</span></font></div><div><font face="times new roman, new york, times, serif"><span style="font-size: 16px;"><br></span></font><div><div>On Sep 26, 2013, at 4:52 PM, D D <<a href="mailto:tru083@yahoo.com">tru083@yahoo.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; position: static; z-index: auto; "><div>Hi,</div><div><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; ">I have an example of a wrong timestamp below. It begins in packet 3563. What do you think?</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; ">Thanks,</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; ">David</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="background-color: transparent;">No. Time Source src port Destination dst port Protocol Info New Column</div><div style="background-color: transparent;"> 3505 13:39:29.130487 10.1.1.226 22776 10.1.1.1
18384 RTP PT=ITU-T G.711 PCMU, SSRC=0x7D5DC9C, Seq=16396, Time=32000 214</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">Frame 3505: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)</div><div style="background-color: transparent;"> WTAP_ENCAP: 1</div><div style="background-color: transparent;"> Arrival Time: Sep 24, 2013 13:39:29.130487000 CDT</div><div style="background-color: transparent;"> [Time shift for this packet: 0.000000000 seconds]</div><div style="background-color: transparent;"> Epoch Time: 1380047969.130487000 seconds</div><div style="background-color: transparent;"> [Time delta from previous captured frame: 0.002441000 seconds]</div><div style="background-color: transparent;"> [Time delta from previous displayed
frame: 0.020005000 seconds]</div><div style="background-color: transparent;"> [Time since reference or first frame: 30.185993000 seconds]</div><div style="background-color: transparent;"> Frame Number: 3505</div><div style="background-color: transparent;"> Frame Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> Capture Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> [Frame is marked: False]</div><div style="background-color: transparent;"> [Frame is ignored: False]</div><div style="background-color: transparent;"> [Protocols in frame: eth:ip:udp:rtp]</div><div style="background-color: transparent;"> [Coloring Rule Name: UDP]</div><div style="background-color: transparent;"> [Coloring Rule String: udp]</div><div style="background-color: transparent;">Ethernet II, Src:
Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a), Dst: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Destination: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Address: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Source: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> Address: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit:
Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Type: IP (0x0800)</div><div style="background-color: transparent;">Internet Protocol Version 4, Src: 10.1.1.226 (10.1.1.226), Dst: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;"> Version: 4</div><div style="background-color: transparent;"> Header length: 20 bytes</div><div style="background-color: transparent;"> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))</div><div style="background-color: transparent;"> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div style="background-color: transparent;"> .... ..00 = Explicit
Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)</div><div style="background-color: transparent;"> Total Length: 200</div><div style="background-color: transparent;"> Identification: 0x0000 (0)</div><div style="background-color: transparent;"> Flags: 0x02 (Don't Fragment)</div><div style="background-color: transparent;"> 0... .... = Reserved bit: Not set</div><div style="background-color: transparent;"> .1.. .... = Don't fragment: Set</div><div style="background-color: transparent;"> ..0. .... = More fragments: Not set</div><div style="background-color: transparent;"> Fragment offset: 0</div><div style="background-color: transparent;"> Time to live: 64</div><div style="background-color: transparent;"> Protocol: UDP (17)</div><div style="background-color: transparent;">
Header checksum: 0x2341 [correct]</div><div style="background-color: transparent;"> [Good: True]</div><div style="background-color: transparent;"> [Bad: False]</div><div style="background-color: transparent;"> Source: 10.1.1.226 (10.1.1.226)</div><div style="background-color: transparent;"> Destination: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;">User Datagram Protocol, Src Port: 22776 (22776), Dst Port: 18384 (18384)</div><div style="background-color: transparent;"> Source port: 22776 (22776)</div><div style="background-color: transparent;"> Destination port: 18384 (18384)</div><div style="background-color: transparent;"> Length: 180</div><div style="background-color: transparent;"> Checksum: 0x17aa [validation disabled]</div><div style="background-color: transparent;">
[Good Checksum: False]</div><div style="background-color: transparent;"> [Bad Checksum: False]</div><div style="background-color: transparent;">Real-Time Transport Protocol</div><div style="background-color: transparent;"> [Stream setup by SDP (frame 2754)]</div><div style="background-color: transparent;"> [Setup frame: 2754]</div><div style="background-color: transparent;"> [Setup Method: SDP]</div><div style="background-color: transparent;"> 10.. .... = Version: RFC 1889 Version (2)</div><div style="background-color: transparent;"> ..0. .... = Padding: False</div><div style="background-color: transparent;"> ...0 .... = Extension: False</div><div style="background-color: transparent;"> .... 0000 = Contributing source identifiers count: 0</div><div style="background-color: transparent;">
0... .... = Marker: False</div><div style="background-color: transparent;"> Payload type: ITU-T G.711 PCMU (0)</div><div style="background-color: transparent;"> Sequence number: 16396</div><div style="background-color: transparent;"> [Extended sequence number: 81932]</div><div style="background-color: transparent;"> Timestamp: 32000</div><div style="background-color: transparent;"> Synchronization Source identifier: 0x07d5dc9c (131456156)</div><div style="background-color: transparent;"> Payload: ffeeebf2776c6c79f0ebee7d6d6b74f5ebedfb6f6b6ffbed...</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">No. Time Source src port Destination dst port Protocol Info
New Column</div><div style="background-color: transparent;"> 3509 13:39:29.150492 10.1.1.226 22776 10.1.1.1 18384 RTP PT=ITU-T G.711 PCMU, SSRC=0x7D5DC9C, Seq=16397, Time=32160 214</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">Frame 3509: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)</div><div style="background-color: transparent;"> WTAP_ENCAP: 1</div><div style="background-color: transparent;"> Arrival Time: Sep 24, 2013 13:39:29.150492000 CDT</div><div style="background-color: transparent;"> [Time
shift for this packet: 0.000000000 seconds]</div><div style="background-color: transparent;"> Epoch Time: 1380047969.150492000 seconds</div><div style="background-color: transparent;"> [Time delta from previous captured frame: 0.002365000 seconds]</div><div style="background-color: transparent;"> [Time delta from previous displayed frame: 0.020005000 seconds]</div><div style="background-color: transparent;"> [Time since reference or first frame: 30.205998000 seconds]</div><div style="background-color: transparent;"> Frame Number: 3509</div><div style="background-color: transparent;"> Frame Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> Capture Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> [Frame is marked: False]</div><div style="background-color: transparent;"> [Frame is
ignored: False]</div><div style="background-color: transparent;"> [Protocols in frame: eth:ip:udp:rtp]</div><div style="background-color: transparent;"> [Coloring Rule Name: UDP]</div><div style="background-color: transparent;"> [Coloring Rule String: udp]</div><div style="background-color: transparent;">Ethernet II, Src: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a), Dst: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Destination: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Address: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual
address (unicast)</div><div style="background-color: transparent;"> Source: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> Address: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Type: IP (0x0800)</div><div style="background-color: transparent;">Internet Protocol Version 4, Src: 10.1.1.226 (10.1.1.226), Dst: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;"> Version: 4</div><div style="background-color: transparent;"> Header length: 20 bytes</div><div style="background-color:
transparent;"> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))</div><div style="background-color: transparent;"> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div style="background-color: transparent;"> .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)</div><div style="background-color: transparent;"> Total Length: 200</div><div style="background-color: transparent;"> Identification: 0x0000 (0)</div><div style="background-color: transparent;"> Flags: 0x02 (Don't Fragment)</div><div style="background-color: transparent;"> 0... .... = Reserved bit: Not set</div><div style="background-color: transparent;"> .1.. .... = Don't fragment: Set</div><div style="background-color:
transparent;"> ..0. .... = More fragments: Not set</div><div style="background-color: transparent;"> Fragment offset: 0</div><div style="background-color: transparent;"> Time to live: 64</div><div style="background-color: transparent;"> Protocol: UDP (17)</div><div style="background-color: transparent;"> Header checksum: 0x2341 [correct]</div><div style="background-color: transparent;"> [Good: True]</div><div style="background-color: transparent;"> [Bad: False]</div><div style="background-color: transparent;"> Source: 10.1.1.226 (10.1.1.226)</div><div style="background-color: transparent;"> Destination: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;">User Datagram Protocol, Src Port: 22776 (22776), Dst Port: 18384 (18384)</div><div style="background-color: transparent;">
Source port: 22776 (22776)</div><div style="background-color: transparent;"> Destination port: 18384 (18384)</div><div style="background-color: transparent;"> Length: 180</div><div style="background-color: transparent;"> Checksum: 0x17aa [validation disabled]</div><div style="background-color: transparent;"> [Good Checksum: False]</div><div style="background-color: transparent;"> [Bad Checksum: False]</div><div style="background-color: transparent;">Real-Time Transport Protocol</div><div style="background-color: transparent;"> [Stream setup by SDP (frame 2754)]</div><div style="background-color: transparent;"> [Setup frame: 2754]</div><div style="background-color: transparent;"> [Setup Method: SDP]</div><div style="background-color: transparent;"> 10.. .... = Version: RFC 1889
Version (2)</div><div style="background-color: transparent;"> ..0. .... = Padding: False</div><div style="background-color: transparent;"> ...0 .... = Extension: False</div><div style="background-color: transparent;"> .... 0000 = Contributing source identifiers count: 0</div><div style="background-color: transparent;"> 0... .... = Marker: False</div><div style="background-color: transparent;"> Payload type: ITU-T G.711 PCMU (0)</div><div style="background-color: transparent;"> Sequence number: 16397</div><div style="background-color: transparent;"> [Extended sequence number: 81933]</div><div style="background-color: transparent;"> Timestamp: 32160</div><div style="background-color: transparent;"> Synchronization Source identifier: 0x07d5dc9c (131456156)</div><div style="background-color: transparent;"> Payload:
fff0edf4796e6e7af3edf17d6f6e76f7eeeffc726d72fcef...</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">No. Time Source src port Destination dst port Protocol Info New Column</div><div style="background-color: transparent;"> 3513 13:39:29.170502 10.1.1.226 22776 10.1.1.1 18384 RTP PT=ITU-T G.711 PCMU, SSRC=0x7D5DC9C, Seq=16398, Time=32320 214</div><div style="background-color:
transparent;"><br></div><div style="background-color: transparent;">Frame 3513: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)</div><div style="background-color: transparent;"> WTAP_ENCAP: 1</div><div style="background-color: transparent;"> Arrival Time: Sep 24, 2013 13:39:29.170502000 CDT</div><div style="background-color: transparent;"> [Time shift for this packet: 0.000000000 seconds]</div><div style="background-color: transparent;"> Epoch Time: 1380047969.170502000 seconds</div><div style="background-color: transparent;"> [Time delta from previous captured frame: 0.002428000 seconds]</div><div style="background-color: transparent;"> [Time delta from previous displayed frame: 0.020010000 seconds]</div><div style="background-color: transparent;"> [Time since reference or first frame: 30.226008000 seconds]</div><div style="background-color:
transparent;"> Frame Number: 3513</div><div style="background-color: transparent;"> Frame Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> Capture Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> [Frame is marked: False]</div><div style="background-color: transparent;"> [Frame is ignored: False]</div><div style="background-color: transparent;"> [Protocols in frame: eth:ip:udp:rtp]</div><div style="background-color: transparent;"> [Coloring Rule Name: UDP]</div><div style="background-color: transparent;"> [Coloring Rule String: udp]</div><div style="background-color: transparent;">Ethernet II, Src: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a), Dst: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Destination: Cisco_e8:a0:11
(00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Address: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Source: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> Address: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual
address (unicast)</div><div style="background-color: transparent;"> Type: IP (0x0800)</div><div style="background-color: transparent;">Internet Protocol Version 4, Src: 10.1.1.226 (10.1.1.226), Dst: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;"> Version: 4</div><div style="background-color: transparent;"> Header length: 20 bytes</div><div style="background-color: transparent;"> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))</div><div style="background-color: transparent;"> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div style="background-color: transparent;"> .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)</div><div style="background-color: transparent;"> Total Length: 200</div><div style="background-color: transparent;"> Identification: 0x0000 (0)</div><div style="background-color: transparent;"> Flags: 0x02 (Don't Fragment)</div><div style="background-color: transparent;"> 0... .... = Reserved bit: Not set</div><div style="background-color: transparent;"> .1.. .... = Don't fragment: Set</div><div style="background-color: transparent;"> ..0. .... = More fragments: Not set</div><div style="background-color: transparent;"> Fragment offset: 0</div><div style="background-color: transparent;"> Time to live: 64</div><div style="background-color: transparent;"> Protocol: UDP (17)</div><div style="background-color: transparent;"> Header checksum: 0x2341 [correct]</div><div style="background-color: transparent;"> [Good: True]</div><div style="background-color: transparent;"> [Bad: False]</div><div style="background-color: transparent;"> Source: 10.1.1.226 (10.1.1.226)</div><div style="background-color: transparent;"> Destination: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;">User Datagram Protocol, Src Port: 22776 (22776), Dst Port: 18384 (18384)</div><div style="background-color: transparent;"> Source port: 22776 (22776)</div><div style="background-color: transparent;"> Destination port: 18384 (18384)</div><div style="background-color: transparent;"> Length: 180</div><div style="background-color: transparent;"> Checksum: 0x17aa [validation disabled]</div><div style="background-color: transparent;"> [Good Checksum: False]</div><div style="background-color: transparent;"> [Bad Checksum: False]</div><div style="background-color: transparent;">Real-Time Transport Protocol</div><div style="background-color: transparent;"> [Stream setup by SDP (frame 2754)]</div><div style="background-color: transparent;"> [Setup frame: 2754]</div><div style="background-color: transparent;"> [Setup Method: SDP]</div><div style="background-color: transparent;"> 10.. .... = Version: RFC 1889 Version (2)</div><div style="background-color: transparent;"> ..0. .... = Padding: False</div><div style="background-color: transparent;"> ...0 .... = Extension: False</div><div style="background-color: transparent;"> .... 0000 = Contributing source identifiers count: 0</div><div style="background-color: transparent;"> 0... .... = Marker: False</div><div style="background-color: transparent;"> Payload type: ITU-T G.711 PCMU (0)</div><div style="background-color: transparent;"> Sequence number: 16398</div><div style="background-color: transparent;"> [Extended sequence number: 81934]</div><div style="background-color: transparent;"> Timestamp: 32320</div><div style="background-color: transparent;"> Synchronization Source identifier: 0x07d5dc9c (131456156)</div><div style="background-color: transparent;"> Payload: fff3eff77a71717bf6eff47e727078f9f0f2fd757075fdf2...</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">No. Time Source src port Destination dst port Protocol Info
New Column</div><div style="background-color: transparent;"> 3563 13:39:29.490508 10.1.1.226 22776 10.1.1.1 18384 RTP PT=ITU-T G.711 PCMU, SSRC=0x7D5DC9C, Seq=16399, Time=480, Mark 214</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">Frame 3563: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)</div><div style="background-color: transparent;"> WTAP_ENCAP: 1</div><div style="background-color: transparent;"> Arrival Time: Sep 24, 2013 13:39:29.490508000 CDT</div><div style="background-color: transparent;"> [Time shift for this packet: 0.000000000 seconds]</div><div style="background-color: transparent;"> Epoch Time: 1380047969.490508000
seconds</div><div style="background-color: transparent;"> [Time delta from previous captured frame: 0.002419000 seconds]</div><div style="background-color: transparent;"> [Time delta from previous displayed frame: 0.320006000 seconds]</div><div style="background-color: transparent;"> [Time since reference or first frame: 30.546014000 seconds]</div><div style="background-color: transparent;"> Frame Number: 3563</div><div style="background-color: transparent;"> Frame Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> Capture Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> [Frame is marked: False]</div><div style="background-color: transparent;"> [Frame is ignored: False]</div><div style="background-color: transparent;"> [Protocols in frame: eth:ip:udp:rtp]</div><div style="background-color: transparent;"> [Coloring Rule Name: UDP]</div><div style="background-color: transparent;"> [Coloring Rule String: udp]</div><div style="background-color: transparent;">Ethernet II, Src: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a), Dst: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Destination: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Address: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Source: Hewlett-_b1:3c:0a
(00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> Address: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Type: IP (0x0800)</div><div style="background-color: transparent;">Internet Protocol Version 4, Src: 10.1.1.226 (10.1.1.226), Dst: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;"> Version: 4</div><div style="background-color: transparent;"> Header length: 20 bytes</div><div style="background-color: transparent;"> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not
ECN-Capable Transport))</div><div style="background-color: transparent;"> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div style="background-color: transparent;"> .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)</div><div style="background-color: transparent;"> Total Length: 200</div><div style="background-color: transparent;"> Identification: 0x0000 (0)</div><div style="background-color: transparent;"> Flags: 0x02 (Don't Fragment)</div><div style="background-color: transparent;"> 0... .... = Reserved bit: Not set</div><div style="background-color: transparent;"> .1.. .... = Don't fragment: Set</div><div style="background-color: transparent;"> ..0. .... = More fragments: Not set</div><div style="background-color:
transparent;"> Fragment offset: 0</div><div style="background-color: transparent;"> Time to live: 64</div><div style="background-color: transparent;"> Protocol: UDP (17)</div><div style="background-color: transparent;"> Header checksum: 0x2341 [correct]</div><div style="background-color: transparent;"> [Good: True]</div><div style="background-color: transparent;"> [Bad: False]</div><div style="background-color: transparent;"> Source: 10.1.1.226 (10.1.1.226)</div><div style="background-color: transparent;"> Destination: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;">User Datagram Protocol, Src Port: 22776 (22776), Dst Port: 18384 (18384)</div><div style="background-color: transparent;"> Source port: 22776 (22776)</div><div style="background-color: transparent;"> Destination
port: 18384 (18384)</div><div style="background-color: transparent;"> Length: 180</div><div style="background-color: transparent;"> Checksum: 0x17aa [validation disabled]</div><div style="background-color: transparent;"> [Good Checksum: False]</div><div style="background-color: transparent;"> [Bad Checksum: False]</div><div style="background-color: transparent;">Real-Time Transport Protocol</div><div style="background-color: transparent;"> [Stream setup by SDP (frame 2754)]</div><div style="background-color: transparent;"> [Setup frame: 2754]</div><div style="background-color: transparent;"> [Setup Method: SDP]</div><div style="background-color: transparent;"> 10.. .... = Version: RFC 1889 Version (2)</div><div style="background-color: transparent;"> ..0. .... = Padding:
False</div><div style="background-color: transparent;"> ...0 .... = Extension: False</div><div style="background-color: transparent;"> .... 0000 = Contributing source identifiers count: 0</div><div style="background-color: transparent;"> 1... .... = Marker: True</div><div style="background-color: transparent;"> Payload type: ITU-T G.711 PCMU (0)</div><div style="background-color: transparent;"> Sequence number: 16399</div><div style="background-color: transparent;"> [Extended sequence number: 81935]</div><div style="background-color: transparent;"> Timestamp: 480</div><div style="background-color: transparent;"> Synchronization Source identifier: 0x07d5dc9c (131456156)</div><div style="background-color: transparent;"> Payload: 4f3e352d2b2f42f9dbd2c0b6adaaaec076595241372e2b2e...</div><div style="background-color:
transparent;"><br></div><div style="background-color: transparent;">No. Time Source src port Destination dst port Protocol Info New Column</div><div style="background-color: transparent;"> 3567 13:39:29.510447 10.1.1.226 22776 10.1.1.1 18384 RTP PT=ITU-T G.711 PCMU, SSRC=0x7D5DC9C, Seq=16400, Time=640 214</div><div style="background-color: transparent;"><br></div><div style="background-color: transparent;">Frame 3567: 214 bytes on wire
(1712 bits), 214 bytes captured (1712 bits)</div><div style="background-color: transparent;"> WTAP_ENCAP: 1</div><div style="background-color: transparent;"> Arrival Time: Sep 24, 2013 13:39:29.510447000 CDT</div><div style="background-color: transparent;"> [Time shift for this packet: 0.000000000 seconds]</div><div style="background-color: transparent;"> Epoch Time: 1380047969.510447000 seconds</div><div style="background-color: transparent;"> [Time delta from previous captured frame: 0.002292000 seconds]</div><div style="background-color: transparent;"> [Time delta from previous displayed frame: 0.019939000 seconds]</div><div style="background-color: transparent;"> [Time since reference or first frame: 30.565953000 seconds]</div><div style="background-color: transparent;"> Frame Number: 3567</div><div style="background-color: transparent;">
Frame Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> Capture Length: 214 bytes (1712 bits)</div><div style="background-color: transparent;"> [Frame is marked: False]</div><div style="background-color: transparent;"> [Frame is ignored: False]</div><div style="background-color: transparent;"> [Protocols in frame: eth:ip:udp:rtp]</div><div style="background-color: transparent;"> [Coloring Rule Name: UDP]</div><div style="background-color: transparent;"> [Coloring Rule String: udp]</div><div style="background-color: transparent;">Ethernet II, Src: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a), Dst: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Destination: Cisco_e8:a0:11 (00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> Address: Cisco_e8:a0:11
(00:09:e8:e8:a0:11)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Source: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> Address: Hewlett-_b1:3c:0a (00:13:21:b1:3c:0a)</div><div style="background-color: transparent;"> .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)</div><div style="background-color: transparent;"> .... ...0 .... .... .... .... = IG bit: Individual address (unicast)</div><div style="background-color: transparent;"> Type: IP (0x0800)</div><div style="background-color: transparent;">Internet Protocol Version 4, Src: 10.1.1.226 (10.1.1.226), Dst: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;"> Version: 4</div><div style="background-color: transparent;"> Header length: 20 bytes</div><div style="background-color: transparent;"> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))</div><div style="background-color: transparent;"> 0000 00.. = Differentiated Services Codepoint: Default (0x00)</div><div style="background-color: transparent;"> .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)</div><div style="background-color: transparent;"> Total Length: 200</div><div style="background-color: transparent;"> Identification: 0x0000 (0)</div><div style="background-color:
transparent;"> Flags: 0x02 (Don't Fragment)</div><div style="background-color: transparent;"> 0... .... = Reserved bit: Not set</div><div style="background-color: transparent;"> .1.. .... = Don't fragment: Set</div><div style="background-color: transparent;"> ..0. .... = More fragments: Not set</div><div style="background-color: transparent;"> Fragment offset: 0</div><div style="background-color: transparent;"> Time to live: 64</div><div style="background-color: transparent;"> Protocol: UDP (17)</div><div style="background-color: transparent;"> Header checksum: 0x2341 [correct]</div><div style="background-color: transparent;"> [Good: True]</div><div style="background-color: transparent;"> [Bad: False]</div><div style="background-color: transparent;">
Source: 10.1.1.226 (10.1.1.226)</div><div style="background-color: transparent;"> Destination: 10.1.1.1 (10.1.1.1)</div><div style="background-color: transparent;">User Datagram Protocol, Src Port: 22776 (22776), Dst Port: 18384 (18384)</div><div style="background-color: transparent;"> Source port: 22776 (22776)</div><div style="background-color: transparent;"> Destination port: 18384 (18384)</div><div style="background-color: transparent;"> Length: 180</div><div style="background-color: transparent;"> Checksum: 0x17aa [validation disabled]</div><div style="background-color: transparent;"> [Good Checksum: False]</div><div style="background-color: transparent;"> [Bad Checksum: False]</div><div style="background-color: transparent;">Real-Time Transport Protocol</div><div style="background-color: transparent;"> [Stream
setup by SDP (frame 2754)]</div><div style="background-color: transparent;"> [Setup frame: 2754]</div><div style="background-color: transparent;"> [Setup Method: SDP]</div><div style="background-color: transparent;"> 10.. .... = Version: RFC 1889 Version (2)</div><div style="background-color: transparent;"> ..0. .... = Padding: False</div><div style="background-color: transparent;"> ...0 .... = Extension: False</div><div style="background-color: transparent;"> .... 0000 = Contributing source identifiers count: 0</div><div style="background-color: transparent;"> 0... .... = Marker: False</div><div style="background-color: transparent;"> Payload type: ITU-T G.711 PCMU (0)</div><div style="background-color: transparent;"> Sequence number: 16400</div><div style="background-color: transparent;">
[Extended sequence number: 81936]</div><div style="background-color: transparent;"> Timestamp: 640</div><div style="background-color: transparent;"> Synchronization Source identifier: 0x07d5dc9c (131456156)</div><div style="background-color: transparent;"> Payload: b6d65c58493b312c2c354fe2daccbcb2abaab3cd5f584c3d...</div><div style="font-size: 16px; background-color: transparent;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size:
12pt;"><br></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> Michael Jerris <<a href="mailto:mike@jerris.com">mike@jerris.com</a>><br> <b><span style="font-weight: bold;">To:</span></b> FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a>> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, September 25, 2013 4:45 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeswitch-users] RTP Wrong Timestamps and audio hiccups in conferencing output<br> </font> </div> <div class="y_msg_container"><br><div id="yiv9410809962">Try looking at the time into the call to find the right packets. Without seeing what exactly is wrong, we are not going to be able to guess what might be going
on.<div><br><div><div>On Sep 24, 2013, at 1:29 PM, D D <<a rel="nofollow" ymailto="mailto:tru083@yahoo.com" target="_blank" href="mailto:tru083@yahoo.com">tru083@yahoo.com</a>> wrote:</div><br class="yiv9410809962Apple-interchange-newline"><blockquote type="cite"><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><div>They are flagged as wrong by Wireshark, in the VoIP RTP Player.</div><div><br></div><div>Unfortunately, Wireshark does not allow me to get from the 'W' in player back to the packets</div><div>it thinks are wrong in the detailed view.</div><div><br></div><div><br></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b>
Michael Jerris <<a rel="nofollow" ymailto="mailto:mike@jerris.com" target="_blank" href="mailto:mike@jerris.com">mike@jerris.com</a>><br> <b><span style="font-weight:bold;">To:</span></b> FreeSWITCH Users Help <<a rel="nofollow" ymailto="mailto:freeswitch-users@lists.freeswitch.org" target="_blank" href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a>> <br> <b><span style="font-weight:bold;">Sent:</span></b> Tuesday, September 24, 2013 2:49 PM<br> <b><span style="font-weight:bold;">Subject:</span></b> Re: [Freeswitch-users] RTP Wrong Timestamps and audio hiccups in conferencing output<br> </font> </div> <div class="yiv9410809962y_msg_container"><br><div id="yiv9410809962">in what way is the timestamp "wrong"?<div><br><div><div>On Sep 24, 2013, at 3:30 PM, D D <<a rel="nofollow" ymailto="mailto:tru083@yahoo.com" target="_blank" href="mailto:tru083@yahoo.com">tru083@yahoo.com</a>> wrote:</div><br class="yiv9410809962Apple-interchange-newline"><blockquote type="cite"><div style="background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><div>Hi,</div><div><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">I am seeing periodic RTP Wrong Timestamps and audio hiccups when using conferencing.</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">I am calling in from two phones on the local LAN, and playing a 440-Hz tone into the conference </div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent;
font-style: normal;">on <span style="background-color:transparent;">one of the phones.</span></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">On the receiving phone, I hear an audio hiccup (and the server-side Wireshark trace shows a </div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">Wrong Timestamp) about once every 750 ms. It is very regular on the output from the</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">conference. </div><div style="font-size: 16px; font-family: 'times new roman', 'new york',
times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">The server-side Wireshark of the input RTP stream looks fine -- there are no anomalies.</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">I am seeing this problem on version 1.2.10 and 1.5.5b.</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">Is this
something I need to report as a bug?</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">Thanks,</div><div style="font-size: 16px; font-family: 'times new roman', 'new york', times, serif; background-color: transparent; font-style: normal;">David</div></div></blockquote></div><br></div></div></div></div></div></div></blockquote></div><br></div></div><br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a ymailto="mailto:consulting@freeswitch.org" href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br><br>FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br><a href="http://www.cudatel.com/" target="_blank">http://www.cudatel.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br><a href="http://wiki.freeswitch.org/" target="_blank">http://wiki.freeswitch.org</a><br><a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a ymailto="mailto:FreeSWITCH-users@lists.freeswitch.org" href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br><br><br></div> </div> </div> </div></div>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>http://www.freeswitchsolutions.com<br><br>FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>http://www.cudatel.com<br><br>Official FreeSWITCH Sites<br>http://www.freeswitch.org<br>http://wiki.freeswitch.org<br>http://www.cluecon.com<br><br>FreeSWITCH-users mailing list<br>FreeSWITCH-users@lists.freeswitch.org<br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br>http://www.freeswitch.org<br></blockquote></div><br></div></body></html>