Re: [tcpdump-workers] Request for DLT

2012-11-24 Thread Guy Harris
On Nov 24, 2012, at 6:09 AM, Michael Tuexen wrote: > could you register a DLT for SCTP? It would be similar to > LINKTYPE_IPV4 / DLT_IPV4 or LINKTYPE_IPV6 / DLT_IPV6, > just covering the SCTP packet without any lower layer. No IPv4 or IPv6 headers, so no identification of the IP-layer endpoint

[tcpdump-workers] timestamp in pcap/tcpdump

2012-11-24 Thread abhinav narain
hi, I am looking for timestamp provided by pcap header and later used by tcpdump. Seems like some of wireless drivers do not provide the mac tsf timestamp. I can't figure out the timestamp meaning in pcap. Its surely not the time when packet arrived at the driver (referring to tsft). Looking at