Hello.
Maybe someone could answer this question. I have a PC with two Ethernet
cards. Every card is isolated from the other, it means, a card cannot see
what the other sees (the hub is segmented). The PC is running two tcpdump
processes
tcpdump udp -i eth1 &
tcpdump udp -i eth0
If every card sees a packet at the same time (not the same packet,
obviously)it could be an error in the timestamp. One packet will have a
correct timestamp, but the other will have a wrong timestamp, because
tcpdump of his card was waiting to have the CPU.
So, the questions are:
First, Is it right or I'm wrong?
Second, If this happens in this way, can I know the size of this error? How
many microseconds?
Thank you very much
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
