I believe BigFix uses the data from /proc/uptime as the source for calculating uptime. Just wondering how the data in that file compares to your uptime, or if suspending the OS (maybe if it a VM or has power saving enabled) may cause a skew that possibly the OS command caters for differently?