<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<STYLE>.hmmessage P {
        PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px; PADDING-TOP: 0px
}
BODY.hmmessage {
        FONT-SIZE: 10pt; FONT-FAMILY: Verdana
}
</STYLE>
<META content="MSHTML 6.00.6000.16788" name=GENERATOR></HEAD>
<BODY class=hmmessage bgColor=#ffffff>
<DIV><FONT face="Courier New">The capture mechanism certainly introduces a
non-constant delay in the timestamps, but if you transmit at a fixed rate, you
must see that fixed rate over time. So, if you are transmitting 1 packet every
10ms, in 10 seconds you should definitely see around 100 * 10 = 1000 packets.
Have you made this experiment?</FONT></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV><FONT face="Courier New">Have a nice day</FONT></DIV>
<DIV><FONT face="Courier New">GV</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=accia77@hotmail.com href="mailto:accia77@hotmail.com">Franz P</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, January 26, 2009 2:47
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] Strange packets
timing</DIV>
<DIV><BR></DIV>Hello everybody,<BR>i am using wireshark 1.0.5 to sniff some
UDP traffic that i am generating from an application i'm developing: i am
working on a windows xp pro based pc,using visual basic 6 and MS visual studio
6 as my development platform,and using a gigabit NIC (but working in a 100Mbps
network).<BR><BR>My application generates a UDP packet every 10ms:i monitor
this timing from my application with an high resolution timer,so i am pretty
sure about this timing datum.<BR>While sniffing the traffic,though,i can
clearly see a smaller delta time between each packet (from about 7 to
9ms).<BR><BR>Before posting i have read about wireshark timestamps,finding out
they are taken from winpcap (from the wireshark wiki:"Wireshark just gets its
timestamp from libpcap/WinPcap, and libpcap/WinPcap gets it from the packet
capture mechanism it uses; Wireshark itself doesn't generate the timestamp so
there's nothing Wireshark can do about it.").<BR><BR>Besides,i have read the
post at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/msg02490.html
,which seems to be related to my problem.<BR><BR><BR>I just find it strange
that i can see a smaller delta time....i wouldn't be surprised if that would
be higher....<BR>Why does it happen?<BR>Thanks in advance!<BR><BR>
<HR>
Scoprilo con Typectionary! <A href="http://typectionary.it.msn.com/"
target=_new>Sei bravo con l'italiano?</A>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>