INV 1396377544.853700 should be 1396377544.085370000 From tcpdump on same system: 1396377544.085370 IP 192.168.0.1.sip > 192.168.0.2.sip: SIP, length: 1391 #### ... Net::Pcap::loop( $pcap, -1, \&pkt_proc, "$filename" ); ... my $tv_usec = $hdr->{'tv_usec'}; ...