Re: [tcpdump-workers] timestamp in Packet Data

2011-07-11 Thread Mcmillan, Scott A
There are many factors that make the timestamps an approximation. In addition to the ones already mentioned, the timestamps is typically taken several kernel layers higher than the driver. You can avoid these approximations on Linux by using tcpdump -j / -J with a NIC that is capable of hard

[tcpdump-workers] next release?

2011-05-31 Thread Mcmillan, Scott A
Hi, What are the plans for the next libpcap and tcpdump releases? 1.1.1 and 4.1.1 were released April 5, 2010. Thanks, Scott - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-08-23 Thread Mcmillan, Scott A
Guy, Thank you for significantly improving and merging this capability into the official repository. I fully agree with your changes. I was thinking that way myself, but was hesitant to propose changes of that degree as my first contribution. As I was testing your changes, I noticed some ver

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-06-03 Thread Mcmillan, Scott A
n May 24, 2010, at 7:26 AM, Mcmillan, Scott A wrote: > This patch adds the capability to select the packet timestamp source. It > also adds support for the PACKET_TIMESTAMP Linux kernel setting to specify > the source of packet timestamps. The corresponding Linux kernel patch is > b

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-06-01 Thread Mcmillan, Scott A
p.org] On Behalf Of Guy Harris Sent: Friday, May 28, 2010 10:30 PM To: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support On May 26, 2010, at 9:03 AM, Mcmillan, Scott A wrote: > Both the 'raw' and 'nic' timestamps are in the

[tcpdump-workers] [PATCH] packet_mmap: expose hw packet timestamps to network packet capture utilities

2010-05-27 Thread Mcmillan, Scott A
David, There was no negative feedback on this RFC, and the corresponding tcpdump patch was well received. Please apply. Thanks, Scott -Original Message- From: netdev-ow...@vger.kernel.org [mailto:netdev-ow...@vger.kernel.org] On Behalf Of Mcmillan, Scott A Sent: Friday, May 21, 2010

Re: [tcpdump-workers] [RFC PATCH 2/2] tcpdump: hw timestamp support

2010-05-27 Thread Mcmillan, Scott A
This is an updated patch for tcpdump-4.1.1 to add the capability to select hw timestamps via the -j command line option. The usage has been simplified: -j now takes no argument, and uses the hw timestamp transformed into the system clock basis corresponding to "-j nic" from the previous patch.

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-05-26 Thread Mcmillan, Scott A
ren.r...@oracle.com] Sent: Tuesday, May 25, 2010 7:37 PM To: Mcmillan, Scott A Cc: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support Scott, Is it just the 82580 or others too? If I look in the source code for OpenSolaris, I see: igb_82575.h:#d

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-05-26 Thread Mcmillan, Scott A
mp-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris Sent: Tuesday, May 25, 2010 8:37 PM To: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support On May 24, 2010, at 7:26 AM, Mcmillan, Scott A wrote: > [My apologies if this double post

Re: [tcpdump-workers] [RFC PATCH 1/2] libpcap: linux hw timestamp

2010-05-26 Thread Mcmillan, Scott A
; timestamp as part of the packet metadata. Scott -Original Message- From: Darren Reed [mailto:darren.r...@oracle.com] Sent: Tuesday, May 25, 2010 8:04 PM To: tcpdump-workers@lists.tcpdump.org Cc: Mcmillan, Scott A Subject: Re: [tcpdump-workers] [RFC PATCH 1/2] libpcap: linux

Re: [tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-05-25 Thread Mcmillan, Scott A
Scott, By the way, do you know which NICs/network controllers support HW timestamping for all packets (not only the PTP datagrams -- IEEE 1588) ? Yon On Mon, May 24, 2010 at 4:26 PM, Mcmillan, Scott A < scott.a.mcmil...@intel.com> wrote: > [My apologies if this double posts. The mail se

[tcpdump-workers] [RFC PATCH 0/2]: hw timestamp support

2010-05-24 Thread Mcmillan, Scott A
[My apologies if this double posts. The mail server didn't care for the first submission.] This patch adds the capability to select the packet timestamp source. It also adds support for the PACKET_TIMESTAMP Linux kernel setting to specify the source of packet timestamps. The corresponding Li

[tcpdump-workers] [RFC PATCH 1/2] libpcap: linux hw timestamp support

2010-05-24 Thread Mcmillan, Scott A
[My apologies if this double posts. The mail server didn't care for the first submission.] This patch adds the general infrastructure needed to select the packet timestamp source as well as specific support for the PACKET_TIMESTAMP Linux kernel setting. Signed-off-by: Scott McMillan --- a

[tcpdump-workers] [RFC PATCH 2/2] tcpdump: hw timestamp support

2010-05-24 Thread Mcmillan, Scott A
[My apologies if this double posts. The mail server didn't care for the first submission.] This patch adds the capability to select the packet timestamp source via the -j command line option. Signed-off-by: Scott McMillan --- a/tcpdump-4.1.1/interface.h 2010-03-11 19:56:44.0 -0600 ++