cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1790
Views
0
Helpful
1
Replies

timestamps on network traces

svick2771
Level 1
Level 1

Hi,

My topology is simple. I have a voice vlan, and my monitoring is happening on the same switch where the calls arrive. Also, the originating call is on the same switch, so there should be no hops involved.

When I trace a packet from a switch, it seems the timestamps for the events I am monitoring are different than if I conduct the same scenario but trace from the source, in this case, an IP phone. My question is this.

My trace is set up to send all packets from port 2 to my monitor port. Will the timestamp I see in the trace tool be from when the packet arrived at port two, or from the time it is sent out my monitor port?

Second question. If the timestamp is from the port on which the packet arrived (2 in this case), will the data I am looking at be different if I trace from the actual IP phone. By that I mean, I am trying to resolve a latency issue, and we are debating if tracing from the actual phone will produce different results than tracing at the switch. Why would the results be different.

This is probably a dumb question, but my lack of experience will be my excuse.

1 Reply 1

amritpatek
Level 6
Level 6

Timestamps on the traces will be that of when the time packet arrived at the 'Monitored' port. There can be some latency in the trace reaching the monitor port/trace analyzer.