operating time between failures