Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-19 Thread Guy Harris
On Aug 19, 2011, at 9:32 AM, Luca Deri wrote: > This said, like Guy said I don't see why you want to disable them. You can > use different/imprecise timestamp such as Linux epoch, but if you need pcap I > believe you will also need timestamps. If nothing he wants to do, and, if he's creating c

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-19 Thread Luca Deri
e/dev.c, right? > Thank you very much! > > -Original Message- > From: tcpdump-workers-ow...@lists.tcpdump.org > [mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris > Sent: Thursday, August 18, 2011 5:47 PM > To: tcpdump-workers@lists.tcpdump.org >

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-19 Thread Fabrizio Giordano
ssage- From: tcpdump-workers-ow...@lists.tcpdump.org [mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Guy Harris Sent: Thursday, August 18, 2011 5:47 PM To: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] Where are incoming packets timestamped at On Aug 18, 2011, at 2:

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-18 Thread Guy Harris
On Aug 18, 2011, at 2:04 PM, Fabrizio Giordano wrote: > Disabling net_timestamp() in net/core/dev.c was one of the first things I > tried, among with disabling other "get_timestamp"-like functions. But > apparently that's not where packes get timestamped. It is, but it's not the *only* place w

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-18 Thread Fabrizio Giordano
ent: Wednesday, August 17, 2011 3:23 PM To: tcpdump-workers@lists.tcpdump.org Cc: Fabrizio Giordano Subject: Re: [tcpdump-workers] Where are incoming packets timestamped at kernel level? On Wed, Aug 17, 2011 at 10:57 PM, Fabrizio Giordano mailto:fabrizio.giord...@riverbed.com>> wrote: Do you

Re: [tcpdump-workers] Where are incoming packets timestamped at

2011-08-17 Thread Nuno Martins
On Wed, Aug 17, 2011 at 10:57 PM, Fabrizio Giordano < fabrizio.giord...@riverbed.com> wrote: > Do you guys know where packets are timestamped in the kernel? > I'm using a 2.6.32-131.4.1.el6.x86_64 kernel and I need to find this > information. > Thank you very much. > Hey, I'm not really sure but

Re: [tcpdump-workers] Where are incoming packets timestamped at kernel level?

2011-08-17 Thread Guy Harris
On Aug 17, 2011, at 2:57 PM, Fabrizio Giordano wrote: > Do you guys know where packets are timestamped in the kernel? > I'm using a 2.6.32-131.4.1.el6.x86_64 kernel I.e., Linux, of somewhat recent vintage. The time stamp would be in the skb->tstamp field for the packet in question. If the ada

[tcpdump-workers] Where are incoming packets timestamped at kernel level?

2011-08-17 Thread Fabrizio Giordano
Do you guys know where packets are timestamped in the kernel? I'm using a 2.6.32-131.4.1.el6.x86_64 kernel and I need to find this information. Thank you very much. - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.