[tcpdump-workers] Pcap to read packets received on a character device

2011-08-17 Thread narender
Hi , I would like to know if its possible to know if its possible to read packets from a linux character device using libpcap. If yes, I would like to know how this can be achieved. I have an application which writes packets to the character device and these packets are to be read by another applic

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-17 Thread Nuno Martins
On Wed, Aug 17, 2011 at 10:57 PM, Fabrizio Giordano < fabrizio.giord...@riverbed.com> wrote: > Do you guys know where packets are timestamped in the kernel? > I'm using a 2.6.32-131.4.1.el6.x86_64 kernel and I need to find this > information. > Thank you very much. > Hey, I'm not really sure but

Re: [tcpdump-workers] Where are incoming packets timestamped at kernel level?

2011-08-17 Thread Guy Harris
On Aug 17, 2011, at 2:57 PM, Fabrizio Giordano wrote: > Do you guys know where packets are timestamped in the kernel? > I'm using a 2.6.32-131.4.1.el6.x86_64 kernel I.e., Linux, of somewhat recent vintage. The time stamp would be in the skb->tstamp field for the packet in question. If the ada

[tcpdump-workers] Where are incoming packets timestamped at kernel level?

2011-08-17 Thread Fabrizio Giordano
Do you guys know where packets are timestamped in the kernel? I'm using a 2.6.32-131.4.1.el6.x86_64 kernel and I need to find this information. Thank you very much. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] Influence of pcap_open_live parameters on

2011-08-17 Thread Doktor Bernd
Hi, thanks for the answers, the caveat of capturing the sent packets when capturing on the same interface is well known to me ;-) So I defenitely use filtering on the capture interface (pcap_setdirection() is not always available) All the best, Bernd > Subject: Re: [tcpdump-workers] In