Re: enquire about the tcpdump

[Michael Richardson <mcr () sandelman ca>]

> > > > > "Shangbo" == Shangbo Wang <wangshangbo.best () googlemail com> writes:
    Shangbo> Hello,

    Shangbo> I downloaded the tcpdump from your website. I want to
    Shangbo> enquire that the tcpdump can extract the timestamp in
    Shangbo> nanoseconds.

The pcap_timeval has units of microseconds only, so that is the limit
for how precisely tcpdump can read/store time from pcap files.
I believe that the ntar format may do nanoseconds.

However, the more relevant question is, can your OS and hardware provide
you with nanosecond resolution timestamps in your packet capture
interface.

-- 
]       He who is tired of Weird Al is tired of life!           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr () sandelman ottawa on ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.