[Winpcap-users] nanosecond libpcap

Gianluca Varenni gianluca.varenni at cacetech.com
Thu Aug 7 22:15:21 GMT 2008


As far as I can tell, at the moment not even libpcap supports nanosecond timestamps. The code seems to just contain the magic number, but nothing has been done to support files with that magic number. Please consider that one of the problems that comes to my mind is that there is currently no API in libpcap that can tell you if the file was saved with the usual microseconfs timestamps or with nanoseconds timestamps. So even if support for that magic number is enabled, libpcap-based and WinPcap-based applications would have a hard time distinguishing between nano and microseconds trace files.

Have a nice day
GV

  ----- Original Message ----- 
  From: Okraszewski, Marcin 
  To: winpcap-users at winpcap.org 
  Sent: Wednesday, August 06, 2008 12:37 AM
  Subject: RE: [Winpcap-users] nanosecond libpcap


  I tried both 4.0.2 and 4.1 beta 4. 

   

  Marcin

   


------------------------------------------------------------------------------

  From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
  Sent: Tuesday, August 05, 2008 5:37 PM
  To: winpcap-users at winpcap.org
  Subject: Re: [Winpcap-users] nanosecond libpcap

   

  Which version of WinPcap are you using?

   

  Have a nice day

  GV

    ----- Original Message ----- 

    From: Okraszewski, Marcin 

    To: winpcap-users at winpcap.org 

    Sent: Tuesday, August 05, 2008 1:40 AM

    Subject: [Winpcap-users] nanosecond libpcap

     

    Hi,

    Winpcap fails to open nanosecond libpcap. I found that nanosecond magic number is not checked by WinPcap even though the magic number is defined by NSEC_TCPDUMP_MAGIC. Do you plan to somehow enable NS libpcap?

    Thank you,

    Marcin


    The contents of this e-mail are intended for the named addressee only. It contains information that may be confidential. Unless you are the named addressee or an authorized designee, you may not copy or use it, or disclose it to anyone else. If you received it in error please notify us immediately and then destroy it. 

     

    Compuware sp. z o.o. (registration number KRS 595) is a company registered in Poland whose registered office is at Ul. Dmowskiego 12,80-264 Gdansk Rejestr handlowy KRS 0000000595 Sadu Rejonowego Gdansk-Polnoc w Gdansku VII Wydzial Gospodarczy Kapital zakladowy 1.140.000 zl oplacony gotówka; NIP: 584-20-88-050; REGON: 191352920 

     


----------------------------------------------------------------------------

    _______________________________________________
    Winpcap-users mailing list
    Winpcap-users at winpcap.org
    https://www.winpcap.org/mailman/listinfo/winpcap-users



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080807/2b4b0fef/attachment.htm


More information about the Winpcap-users mailing list