changes to capture and process timestamps with IP addresses