[Winpcap-users] timming analisy

[Loris Degioanni]

Ricardo Santos wrote:

> hi,
> 
> 
> i have a question for developers, whats is the timming measure of the 
> tool???
> 
> when the packet come in the ethernet card, or the tool read the buffer 
> of ethernet card?

The packets are timestamped when they are received by the WinPcap 
capture driver, whose place in the OS is shortly described at 
http://www.winpcap.org/docs/docs31/html/group__NPF.html.

Essentially, the timestamp is associated with the packet after it's 
being copied to the PC memory and when its arrival is signaled to the 
protocols.

Loris


> 
> thanks for attention,
>  
> 
> 
> Ricardo
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users