#90 Parse NTP to determine time skew

open
nobody
5
2009-12-12
2009-12-12
No

By extracting the time from an NTP packet the time skew can be determined between the frame timestamp in the pcap and the NTP server. This can be important to know in a forensic investigation when determining a timeline. Kudos to Steffen for the idea.

Discussion


Log in to post a comment.