tcpdump mailing list archives

Re: timestamp resolution


From: "maxmagna maxmagna" <maxmagna () hotmail com>
Date: Mon, 16 Dec 2002 23:51:14 +0000

Yep, you were right. Installed fresh kernel (v2.4.20), re-built with the CONFIG_X86_TSC option on and now I am able to get micro-sec resolution. Thanks a LOT!


From: Guy Harris <guy () netapp com>
To: maxmagna maxmagna <maxmagna () hotmail com>
CC: tcpdump-workers () tcpdump org
Subject: Re: [tcpdump-workers] timestamp resolution
Date: Mon, 16 Dec 2002 11:31:32 -0800

On Mon, Dec 16, 2002 at 05:57:47PM +0000, maxmagna maxmagna wrote:
> I am dealing with this problem. I am using tcpdump to collect tcp
> network traces and I have noticed that the time stamping resolution is
> 10 milli-seconds. However I need higher resolution granularity (order of
> micro-seconds). How can I improve resolution? Can anyone suggest any pointer
> to solve this problem? Any information is appreciated. Here's my
> system configuration:
>
> tcpdump: version 3.6
> libcap: version 0.6
> RedHat: version 7.2
> Linux Kernel: version 2.4.7-10
> Processor: Pentium 4, 1700MHz

Probably either a Linux kernel configuration issue or a Red Hat bug:

        http://www.ethereal.com/faq.html#q5.8
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: