On Sun, Mar 25, 2001 at 04:55:54PM +0800, Wang Haiguang wrote:
> When tcpdump stamp the time for each packet?
Tcpdump doesn't do it - it's done by the packet capture mechanism in
whatever OS you're running.
> When it reaches the interrupt or after the interrupt processing program
> reads the packet from the interface?
That depends on the OS. I suspect that, on most if not all OSes, it's
*NOT* done in the interrupt handling routine.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
