On May 14, 2009, at 11:58 AM, Pierre KARAMPOURNIS wrote:

Furthermore, if we try to use tools using libpcap to read nsec-pcap files,
it won't work

What should "work" mean?

It can't mean "supply time stamps with nanosecond precision", as that would break source and binary compatibility. There would have to be a different versions of pcap_open_offline() that causes nanosecond time stamps to be supplied.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.

Reply via email to