Gregor Maier wrote:
I'm afraid, but I think your patch has a race condition under (at least under Linux). In Linux two syscalls are required to read a packet.
Unless I'm misinterpreting socket(7), at least on Linux systems with the SO_TIMESTAMP socket option, you can set that option and use recvmsg() to read a packet; the control message for the packet will contain the time stamp.
Is that correct? If so, in which version of the kernel did SO_TIMESTAMP first appear?
- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
