Re: [tcpdump-workers] Pcap timestamping issues

2005-02-08 Thread Ed Maste
On Wed, Feb 09, 2005 at 12:02:33AM +0100, erik corell wrote: > *How does pcap timestamp outbound packets? > (Is it doing a copy of the packet, timestamping it and > then send it, or is it somehow sent and then timestamped?) I don't think you can necessarily rely on either behaviour. I'm fairly fa

[tcpdump-workers] Pcap timestamping issues

2005-02-08 Thread erik corell
Hi, I am doing a research project on clock syncronization using ntp, pcap and tsc. Hopefully the outcome will be a very accurate and robust difference clock. One thing is really bothering me though. I need to have a timestamp that I am SURE of being BEFORE (but very very close to) the NTP packe