, July 09, 2011 7:59 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] timestamp in Packet Data
Is the approximation because of the fact that NIC card generarates interrupt
only after some number of packets arrive ?. Does device polling affect time
stamp ? At what stage of
Is the approximation because of the fact that NIC card generarates interrupt
only after some number of packets arrive ?. Does device polling affect time
stamp ? At what stage of capture time stamping is done ?
On Sat, Jul 9, 2011 at 6:59 PM, Alokat wrote:
> On 07/09/11 21:56, Guy Harris wrote:
>
On Jul 9, 2011, at 6:52 PM, Sanjay Sundaresan wrote:
> Is the approximation because of the fact that NIC card generarates interrupt
> only after some number of packets arrive ?
Yes, that's one of the reasons. There's also the delay between the arrival of
the packet and the delivery of the inte
Is the approximation because of the fact that NIC card generarates interrupt
only after some number of packets arrive ?. Does device polling affect time
stamp ? At what stage of capture time stamping is done ?
On Sat, Jul 9, 2011 at 6:59 PM, Alokat wrote:
> On 07/09/11 21:56, Guy Harris wrote:
On 07/09/11 21:56, Guy Harris wrote:
> On Jul 9, 2011, at 4:41 PM, Alokat wrote:
>
>> I'm wondering what is in the pcap_data (pcap file format) and what is not?
>> Especially the timestamp ... is it just in the packet_header or in the
>> packet_data too?
> A pcap file starts with a header. Followi
On Jul 9, 2011, at 4:41 PM, Alokat wrote:
> I'm wondering what is in the pcap_data (pcap file format) and what is not?
> Especially the timestamp ... is it just in the packet_header or in the
> packet_data too?
A pcap file starts with a header. Following the header are zero or more packet
reco
Hi,
I'm wondering what is in the pcap_data (pcap file format) and what is not?
Especially the timestamp ... is it just in the packet_header or in the
packet_data too?
Regards,
alokat
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
