Re: Where are incoming packets timestamped at

[Nuno Martins <nuno.m.g.martins () gmail com>]

On Wed, Aug 17, 2011 at 10:57 PM, Fabrizio Giordano <
Fabrizio.Giordano () riverbed com> wrote:

> Do you guys know where packets are timestamped in the kernel?
> I'm using a 2.6.32-131.4.1.el6.x86_64 kernel and I need to find this
> information.
> Thank you very much.

Hey,

I'm not really sure but i think it is in the tpacket_rcv function in
af_packet.c [1] that lives in net/packet in the linux source code.

If you go near line 770 in that file you will see that is going to happen
some timestamping.


[1] http://lxr.linux.no/linux+v3.0.3/net/packet/af_packet.c#L669



> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.


-- 
Nuno Martins
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.