Why are tcpreplay timings all messed up?
Occasionally someone complains about timings to be “messed up”. Usually this seems to be caused by a pcap which contains packets with non-sensical timestamps. More specifically, I have seen cases where a packet has a timestamp before the previous packet in the capture file. I’m not sure how such a pcap got created, but it seems to occasionally happen. There may be other reasons for this to happen, such as a bug in tcpreplay, so be sure you’re running the latest version of code. If after checking these two possibilities, please contact the author so that he can help debug the issue.
