We have our own low-level logging mechanism and we use KeQuerySystemTime()
to get our timestamps. (We especially like it because it’s just a memory
read of a global variable – no function call at all.)
We’ve noticed, however, that once in a while we see the time jump backwards
a bit. For example, it just happened a few hours ago on one of our systems,
and it jumped backwards about 0.749 seconds. Up to now, we’ve just assumed
that someone updated the time manually or something, but with this case, I
was the only person here, and no one else would have been on the machine.
Of course, we have no way of knowing if the clock jumps forward, but I
assume it does that as well sometimes.
I’m curious if this is NT trying to correct missed clock interrupts or the
innacuracy of that method by periodically resyncing with the motherboard’s
RTC (real-time clock).
Does anyone know?
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com