Re: libpcap pcap_sendpacket support across platforms.

[Guy Harris <guy () alum mit edu>]

On Mar 23, 2004, at 1:36 PM, Stephen Donnelly wrote:

> Might be nice to support different time-stamp formats officially 
> somehow, e.g. AIX's nanosecond resolution timespec.

Do we need arbitrary formats, or just seconds plus fractions of seconds?

We could either make the time stamp format per-interface or per-file; 
doing the latter means that merging captures (as opposed to 
concatenating captures, as the "file header" record would specify the 
time stamp format of all subsequent packets until the next "file 
header" record) would require that we choose the highest-resolution 
format and convert time stamps in other formats to that format.

We might also want the "file header" record to contain a capture start 
time (some other capture formats do) and perhaps that time represented 
as YYYY/MM/DD/HH/MM/SS.SSSS... - or perhaps the time zone name in, say, 
"Arthur Olson" format, in case somebody wants to know what time a 
packet arrived in local time on the machine on which the capture was 
done.

-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe