I have a logical image of a Blackberry 8520 created using Oxygen.
I have 2 SMS text messages
SMS 1 (sent from device) timestamped 1055hrs reads "I am well thanks"
SMS 2 (received by device) timestamped 1100hrs reads "How are you?"
Both timestamps are marked as "device time" within the Oxygen report. I am thinking that the analysed device's clock is 5 minutes out of sync.
My opinion is that the sent timestamp is generated by the Blackberry system clock and the received timestamp being generated by the CSP's server…..but I am just looking for some verification if anyone can please advise?
Cheers
It matches our observations.
Very often, for incoming SMS messages, two time fields are retrievable from BlackBerry devices. One is generated by the system clock and one by the server provider. The GMT settings might be incorrect on this particular handset as well.
redcelica
I cant post a screenshot of a good example I have which may want you to alter the thought process re time and dates, please pm me with your email and I will send direct to you