Guy Harris wrote:
Unless I'm misinterpreting socket(7), at least on Linux systems with the SO_TIMESTAMP socket option, you can set that option and use recvmsg() to read a packet; the control message for the packet will contain the time stamp.
...although that doesn't address the issue of the read-modify fields in the pcap handle - which *are* significant, so the reentrancy problem is, as Gregor notes, harder to fix.
- This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
