Hi Guy, --- Guy Harris <[EMAIL PROTECTED]> wrote: > On Thu, Nov 28, 2002 at 12:20:31PM -0800, np linux > wrote: > > Now, the question: Is doing so a right way to > measure the processing > > time, as we are not sure where exactly does libcap > captures the > > packates. Is it right before network driver or > after it ao anywhere > > else? > > On Linux, libpcap captures packets using PF_PACKET > sockets (or, on 2.0 > kernels or with libpcap built on a 2.0-kernel > system, > PF_INET/SOCK_PACKET sockets). Packet time stamps > come from the Linux > networking code. > > I don't have time right now to once again plow > through the Linux > networking code to check where those packets are > picked up; i will really appreciate if you can point me to some place in archive or some where else where I can find this information. I have posted to net-linux still waiting for any reply.
Thanks, NItin I'd suggest > reading the Linux networking code yourself, or > asking somebody on, say, > the linux-net mailing list. > _______________________________________________ > Ethereal-dev mailing list > [EMAIL PROTECTED] > http://www.ethereal.com/mailman/listinfo/ethereal-dev __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com
