Re: How does tshark "synchronize" multiple interfaces?

[Guy Harris <guy () alum mit edu>]

On Feb 6, 2018, at 8:39 AM, S. Jacobi <sjacobi () mailueberfall de> wrote:

> I wasn't able to spot this mechanism in the code,

That's because it's not in the code, which would certainly explain why you're getting packets out of order.

So dumpcap needs to sort packets by time stamp before writing them to the capture file if it's capturing from multiple 
interfaces.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe