On Fri, Jun 07, 2002 at 07:41:50PM +0200, pepa wrote: > If every card sees a packet at the same time (not the same packet, > obviously)it could be an error in the timestamp. One packet will have a > correct timestamp, but the other will have a wrong timestamp, because > tcpdump of his card was waiting to have the CPU.
The packet time stamp comes from code in the OS kernel, *NOT* from tcpdump. Packet time stamps might also not have enough resolution to cause two packets both processed by the same CPU to have different time stamps. - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
