Dumas Hwang wrote:
Can I get a magic number associated with this format?
0xa12b3c4d - it's currently defined in savefile.c.
If there's anything else you want to add to the header, do so, and then
send us the patch to savefile.c to read the new format, and to
pcap-int.h to define it.
-
This is the
Can I get a magic number associated with this format?
Regards,
Dumas Hwang
-Original Message-
From: Guy Harris [mailto:[EMAIL PROTECTED]
Sent: January 6, 2005 4:20 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] nanosecond timestamp
Dumas Hwang wrote:
> Yes
Dumas Hwang wrote:
Yes, I can use that structure too. Sorry, I am quite new to this. Is
the next step to get the magic number, change Ethereal so that it will
recognize the new magic number and submit the patch?
The next step is to change libpcap so that all programs using libpcap
can read files
Yes, I can use that structure too. Sorry, I am quite new to this. Is
the next step to get the magic number, change Ethereal so that it will
recognize the new magic number and submit the patch?
Regards,
Dumas Hwang
>So the Navtel header should perhaps be
> struct pcaprec_navtel_hdr {
>
Rick Jones wrote:
Are there any issues with having the header not be an 8 byte multiple in
size? lots of stuff (iirc) wants four-byte, but I'm not sure about 8
And is there a compelling reason to supply both the microseconds and
nanoseconds time stamps in the record header? Yes, libpcap would h
Dumas Hwang wrote:
Hi!
Can I add this structure in pcap.h and get a new magic number so
that we can support nanosecond resolution?
/* "libpcap" record header. */
struct pcaprec_hdr {
guint32 ts_sec; /* timestamp seconds */
guint32 ts_usec;/* timestamp microsecond
Hi!
Can I add this structure in pcap.h and get a new magic number so
that we can support nanosecond resolution?
/* "libpcap" record header. */
struct pcaprec_hdr {
guint32 ts_sec; /* timestamp seconds */
guint32 ts_usec;/* timestamp microseconds */
Perhaps, the man page says:
The gethrtime() function returns the current high-resolution
real time. Time is expressed as nanoseconds since some arbi-
trary time in the past; it is not correlated in any way to
the time of day, and thus is not subject to resetting or
dr
...the time stamps you get out of libpcap might have
nanosecond *precision* but they might not have nanosecond *accuracy*) -
So what am I trying to say here? Unless you have hardware timestamps
in captured packets, one software timestamp is as good as the next in
a well written application.
If
On Dec 9, 2004, at 3:23 PM, Darren Reed wrote:
So what am I trying to say here? Unless you have hardware timestamps
in captured packets, one software timestamp is as good as the next in
a well written application.
...or as bad as the next.
If you want absolute time stamps, nanosecond resolution wi
In some email I received from Guy Harris, sie wrote:
>
> On Dec 9, 2004, at 2:08 PM, Darren Reed wrote:
>
> > In some email I received from Guy Harris, sie wrote:
> >> BTW, where are you getting the nanosecond-resolution time stamps in
> >> Solaris?
> >
> > gethrtime
>
> That says what the high-
On Dec 9, 2004, at 2:08 PM, Darren Reed wrote:
In some email I received from Guy Harris, sie wrote:
BTW, where are you getting the nanosecond-resolution time stamps in
Solaris?
gethrtime
That says what the high-resolution time counter's value is now, not
what the value was when bufmod saw the pack
In some email I received from rick jones, sie wrote:
> >> BTW, where are you getting the nanosecond-resolution time stamps in
> >> Solaris?
> >
> > gethrtime
>
> there is such a thing in some of the other OSes as well - netperf will
> use it for -DHISTOGRAM because it typically is lower overhead.
BTW, where are you getting the nanosecond-resolution time stamps in
Solaris?
gethrtime
there is such a thing in some of the other OSes as well - netperf will
use it for -DHISTOGRAM because it typically is lower overhead.
however, my recollection of the manpages is that it is only good for
relati
In some email I received from Guy Harris, sie wrote:
>
> On Dec 9, 2004, at 12:48 PM, Dumas Hwang wrote:
>
> > I would like to get nanosecond resolution on Solaris in
> > libpcap.
>
> BTW, where are you getting the nanosecond-resolution time stamps in
> Solaris?
gethrtime
-
This i
On Dec 9, 2004, at 12:48 PM, Dumas Hwang wrote:
I would like to get nanosecond resolution on Solaris in
libpcap.
BTW, where are you getting the nanosecond-resolution time stamps in
Solaris?
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
On Dec 9, 2004, at 12:48 PM, Dumas Hwang wrote:
I would like to get nanosecond resolution on Solaris in
libpcap. What's the best way to go about it? I suppose it's not a
good
idea to change struct timeval ts in pkthdr to timespec.
That would be an amazingly bad idea (and it was an am
Hi!
I would like to get nanosecond resolution on Solaris in
libpcap. What's the best way to go about it? I suppose it's not a good
idea to change struct timeval ts in pkthdr to timespec. Should I add a
new struct and request a new magic number? I would think many people
need nanose
18 matches
Mail list logo
