Re: Where are incoming packets timestamped at

[Guy Harris <guy () alum mit edu>]

On Aug 19, 2011, at 9:32 AM, Luca Deri wrote:

> This said, like Guy said I don't see why you want to disable them. You can use different/imprecise timestamp such as 
> Linux epoch, but if you need pcap I believe you will also need timestamps.

If nothing he wants to do, and, if he's creating capture files and giving them to other people, nothing those other 
people want to do, require time stamps - i.e., if nobody wants to know, for example, how long it takes between requests 
and responses for a particular protocol, or wants to investigate any network delays - he could get away with not having 
time-stamped packets (the time stamps will all be zero, probably).-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.