[tcpdump-workers] Returned mail: Data format error

2005-05-08 Thread itojun
¶Õ SÙÂaSiøVÁDØYxÓV]Ý9݂݉eÀž`$ÐHá~“5ŒùfS¥Ó©Ñ5HCŸâqi֎QEE°˜>–^æä)%y$vüñh§ê2†YêÚQg§îîe¥å¦†ÍOpV‡|’– âwŒFjV¦¼Jx¹xäQtþÉvH²s¿„Ça Ij(°Þ¸E°Ó30þÞ"2F¥ð^Të߯„Õëb/|Waî‘Á´DÈK,Ý«±\5ÆÔHy¹OK̵í‘Ãƍ"0`¾;Ü#žFÑʤ¯0ñ‘Žk\‰ïÂ}ˆú>UðPª¥×aÍú{ÇwáaSm╞t_øÇ>ÃÎ>Ÿë¬ò;m7[|»h÷×é˜ï¼xƒ„—_µ %g‹À¹Ú^|ŽÒþýxÆåìã¶ãž?ôÔî8”n Sk

Re: [tcpdump-workers] PCAP Timestamp - HWClock or SWClock?

2005-05-08 Thread Stephen Donnelly
Guy Harris wrote: J.O. Leger wrote: Is the timestamp in pcap_pkthdr from the hardware clock or the software clock? The timestamp is from whatever it's from. :-) If you're capturing from a DAG card from Endace (recent versions of libpcap can be built with support for DAG cards), I suspect the ti