... format.1
There is some variation in time stamps depending on the platform from which the traces were collected. The trace shown here was collected from a machine running Linux. Traces from Windows 9x machines all end in 0 because of the 10 ms. default resolution. Windows NT exhibits the same timing resolution, but times are reported a little bit differently, with a long series of trace entries ending all in 2, then all in 3, then all in 4, etc. Because the trace collector was implemented in Java, there was no way to increase this timing resolution for Windows, although it is possible to collect traces with much greater resolution using the performance counters in Pentium-class CPUs by writing custom applications for Windows.

Using natively written and compiled keystroke reporting programs for both Linux and Windows revealed that the time stamps reported by Java were accurate to within 1-2 milliseconds of times reported by the native programs (consistently for Linux, averaged for Windows). The author wishes to thank Laramie Leavitt and Adrian Perrig for writing native tools that allowed this measurement under Windows and Linux, respectively.

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
Alen Peacock
2000-04-12