Re: wireshark capture shows packets not chronologically captured

[Stephen Fisher <steve () stephen-fisher com>]

On Sun, Dec 19, 2010 at 01:10:54PM -0800, Guy Harris wrote:

> Is there no way to tell Linux to arrange that packets be delivered to 
> a PF_PACKET socket in time stamp order?  If not, is there any way to, 
> at least, provide some mechanism to allow libpcap to sort the packets 
> in time stamp order before it delivers them?

That thread was 8 years ago, and a couple replies down, Alan Cox said: 
"You should never need it. Ethernet, hubs, switches, routers, internet 
backbones etc will all cause packet re-ordering. You should also expect 
the percentage of re-ordered frames on the net to rise and rise." *sigh*

The first reply says to use "IRQ Affinity," which appears to allow you 
to specify which CPU(s) are allowed to process certain interrupt 
requests.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe