[tcpdump-workers] libpcap based timestamp in linux

Hello, My question is regarding when does libpcap timestamp the packet - when the packet arrives in the kernel from NIC or when the packet is read by application in user space? My understanding was that libpcap timestamps the packet upon packet's arrival in kernel from NIC. However, I discovered

Re: [tcpdump-workers] libpcap based timestamp in linux

On Sep 23, 2005, at 8:01 PM, Manish Jain wrote: My question is regarding when does libpcap timestamp the packet - when the packet arrives in the kernel from NIC or when the packet is read by application in user space? Libpcap reads the time stamp when it reads the packet. However, the ti