Re: [tcpdump-workers] PCAP Timestamp - HWClock or SWClock?

J.O. Leger wrote: Is the timestamp in pcap_pkthdr from the hardware clock or the software clock? The timestamp is from whatever it's from. :-) If you're capturing on an interface on a UN*X or Windows (with WinPcap) machine, the time stamp is from the capture mechanism that libpcap uses. Those ca

Re: [tcpdump-workers] Does option -w influence the packet capture?

David Rosal wrote: > I'm using tcpdump-3.7.2 to capture ethernet traffic, and I'm wondering > why it captures much less packets when I use option -w. > > I have done the following test: > > I've run "tcpdump -s0" many times for 10 seconds each time, and the > average result is to capture about 10

[tcpdump-workers] Does option -w influence the packet capture?

Hi. I'm using tcpdump-3.7.2 to capture ethernet traffic, and I'm wondering why it captures much less packets when I use option -w. I have done the following test: I've run "tcpdump -s0" many times for 10 seconds each time, and the average result is to capture about 100 packets. I've run "tcpdump

[tcpdump-workers] PCAP Timestamp - HWClock or SWClock?

Is the timestamp in pcap_pkthdr from the hardware clock or the software clock? Thanks J.O. ___ Join Excite! - http://www.excite.com The most personalized portal on the Web! - This is the tcpdump-workers list. Visit https://lists.sandelman.

[tcpdump-workers] Automatic report from sources (tcpdump libpcap htdocs) between 05.05.2005 - 06.05.2005 GMT

CVS log entries from 05.05.2005 (Thu) 09:07:04 - 06.05.2005 (Fri) 09:07:04 GMT = Summary by authors = Author: guy File: tcpdump/print-nfs.c; Revisions: 1.108, 1.106.2.2 File: tcpd