[Winpcap-users] MODE_STAT

Gianluca Varenni gianluca.varenni at cacetech.com
Tue Dec 11 20:36:39 GMT 2007


Clearly speaking, that jitter in the header time is not normal at all. It 
can happen on a dual core/hyperthreaded or multiprocessor machine, but it 
should not happen on a single processor machine like the one you have.
I need to investigate the issue, but it might take some time.

Have a nice day
GV


----- Original Message ----- 
From: "Fitt, Jonathan" <Jonathan.Fitt at anritsu.com>
To: <winpcap-users at winpcap.org>
Sent: Tuesday, December 11, 2007 12:25 PM
Subject: [Winpcap-users] MODE_STAT


> Ok, so I've done some more investigation and it's still somewhat odd.
> I have a loop with a pcap_open to_ms set to 100ms. Every time the
> callback function is called I record:
> The time from the results header
> The "tick" count which is a pretty good system time
> The number of packets in the results
>
> The tick count shows that it's pretty reliably being called every 100ms
> (although not always presumably another system thread grabs focus?)
>
> I need to know if the header time can be trusted? If it says x packets
> were received at time Y do I trust that and assume that it's got out of
> order somehow, or do I rely on the time that the callback is actually
> called (which is every 100ms as I want)?
>
> Packet Header Time Tick No. Packets Packet Header Diff
> Tick Diff
> 1197325744.945760 27105555 0
> 1197325745.514290 27105655 0 568.530 100
> 1197325745.146640 27105756 0 -367.650 101
> 1197325745.245990 27105856 0 99.350 100
> 1197325745.346160 27105956 0 100.170 100
> 1197325745.446320 27106056 0 100.160 100
> 1197325745.546830 27106156 0 100.510 100
> 1197325745.646580 27106256 0 99.750 100
> 1197325745.746730 27106356 4 100.150 100
> 1197325745.846900 27106457 1 100.170 101
> 1197325745.947030 27106557 0 100.130 100
> 1197325746.527660 27106657 0 580.630 100
> 1197325746.149130 27106757 0 -378.530 100
> 1197325746.248870 27106857 1 99.740 100
> 1197325746.347600 27106957 0 98.730 100
> 1197325746.447760 27107057 1 100.160 100
> 1197325746.548390 27107158 0 100.630 101
> 1197325746.648020 27107258 0 99.630 100
> 1197325746.748180 27107358 0 100.160 100
> 1197325746.848340 27107458 0 100.160 100
> 1197325746.948470 27107558 0 100.130 100
> 1197325747.548270 27107658 0 599.800 100
> 1197325747.148750 27107758 0 -399.520 100
> 1197325747.252510 27107859 2 103.760 101
> 1197325747.349040 27107959 0 96.530 100
> 1197325747.449170 27108059 0 100.130 100
> 1197325747.563210 27108169 0 114.040 110
> 1197325747.659880 27108269 0 96.670 100
> 1197325747.759660 27108369 0 99.780 100
> 1197325747.859770 27108469 0 100.110 100
> 1197325747.959910 27108570 0 100.140 101
> 1197325748.668550 27108670 0 708.640 100
> 1197325748.160230 27108770 0 -508.320 100
>
> ....
>
> 1197325758.935910 27119545 0 100.350 100
> 1197325759.358340 27119645 2 422.430 100
> 1197325759.136200 27119746 0 -222.140 101
> 1197325759.236420 27119846 0 100.220 100
> 1197325759.493020 27120096 0 256.600 250
> 1197325759.626880 27120236 0 133.860 140
> 1197325759.729230 27120336 0 102.350 100
> 1197325759.831530 27120437 0 102.300 101
> 1197325759.937610 27120547 0 106.080 110
> 1197325760.622420 27120667 0 684.810 120
> 1197325760.207600 27120817 0 -414.820 150
> 1197325760.307950 27120917 0 100.350 100
> 1197325760.412920 27121017 0 104.970 100
> 1197325760.507980 27121118 2 95.060 101
> 1197325760.667990 27121268 0 160.010 150
> 1197325760.770390 27121378 0 102.400 110
> 1197325760.868490 27121478 0 98.100 100
> 1197325760.968630 27121578 0 100.140 100
> 1197325761.742020 27121678 0 773.390 100
> 1197325761.168980 27121779 0 -573.040 101
> 1197325761.269010 27121879 0 100.030 100
> 1197325761.369980 27121979 0 100.970 100
> 1197325761.470030 27122079 0 100.050 100
> 1197325761.569470 27122179 0 99.440 100
> 1197325761.669880 27122279 0 100.410 100
> 1197325761.769770 27122379 0 99.890 100
> 1197325761.869920 27122480 0 100.150 101
> 1197325761.970060 27122580 0 100.140 100
> 1197325762.775780 27122680 2 805.720 100
> 1197325762.170430 27122780 0 -605.350 100
>
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 



More information about the Winpcap-users mailing list