Hi,
I agree that the modification I want to do is modifying the behaviour of
libpcap in a way that the compatibility can't be assured.
What I planned to do was creating a new compilation macro which will be
defined if the user wants it (e.g. ./configure --enable-nsec-timestamp) that
will modify t
On May 14, 2009, at 11:58 AM, Pierre KARAMPOURNIS wrote:
Furthermore, if we try to use tools using libpcap to read nsec-pcap
files,
it won't work
What should "work" mean?
It can't mean "supply time stamps with nanosecond precision", as that
would break source and binary compatibility. T
Hello,
A device like an Endace DAG can provide nanosecond timestamped packets using
the usec field of the PCAP format to store the nanoseconds.
Moreover, it seems that this variation of the PCAP format is tolerate if you
use the NSEC_TCPDUMP_MAGIC magic number in your PCAP file.
But in fact, this
