The timestamp is always taken before sending the packet thus ensuring responses' timestamps are always in the future but there is always a little overhead betwee the timestamp and the time the packet hits the wire
