arris
>
> On May 14, 2009, at 11:58 AM, Pierre KARAMPOURNIS wrote:
>
> Furthermore, if we try to use tools using libpcap to read nsec-pcap files,
>> it won't work
>>
>
> What should "work" mean?
>
> It can't mean "supply time stamps w
Hello,
A device like an Endace DAG can provide nanosecond timestamped packets using
the usec field of the PCAP format to store the nanoseconds.
Moreover, it seems that this variation of the PCAP format is tolerate if you
use the NSEC_TCPDUMP_MAGIC magic number in your PCAP file.
But in fact, this
Guy Harris wrote :
On Feb 27, 2009, at 9:03 AM, Pierre KARAMPOURNIS wrote:
I worked on old Linux Kernel versions so I will try the latest ones
to see
hardware timestamping. So now I have to search for Network cards
which can
timestamp the packets with nanosecond resolution (Endace DAG cards
2009/2/27 Guy Harris
>
> On Feb 26, 2009, at 5:22 PM, Guy Harris wrote:
>
> The *accuracy* is limited by the fact that most network adapters aren't
>> designed primarily for use when capturing traffic, so they don't do their
>> own packet timestamping, and libpcap normally just plugs into the OS
2009/2/27 Pierre KARAMPOURNIS
>
>
> 2009/2/27 David Young
>
>> On Thu, Feb 26, 2009 at 06:49:45PM -0600, Pierre Karampournis wrote:
>> > Hi,
>> >
>> > I am currently working in a university lab and I need to capture packets
>> > with
2009/2/27 David Young
> On Thu, Feb 26, 2009 at 06:49:45PM -0600, Pierre Karampournis wrote:
> > Hi,
> >
> > I am currently working in a university lab and I need to capture packets
> > with a nanosecond precision timestamp using the Pcap format.
>
> Pierre
Hi,
I am currently working in a university lab and I need to capture packets
with a nanosecond precision timestamp using the Pcap format.
Pcap format allows nanosecond timestamping (even if it is not
implemented in libpcap yet) so I tried to modify libPcap and Tcpdump to
realize that. But my
