[Winpcap-users] Where does the Winpcap timestamp come from? andothers

[Gianluca Varenni]

  ----- Original Message ----- 
  From: John Wang 
  To: winpcap-users at winpcap.org 
  Sent: Friday, May 01, 2009 1:09 AM
  Subject: [Winpcap-users] Where does the Winpcap timestamp come from? andothers


  Hi All,


  I'm now working on a project which needs to to record the captured wireless packets arrival time precisely. I used Wireshark and CACE adapter before. But it seems they record the arrival time in microseconds. As Wireshark doesn't access the hardware directly, it receives the raw data from WinPcap, so I'm thinking maybe I can get more accurate local timestamp from winPcap directly

  In the document of Winpcap, the NPF records the captured packets, and also their timestamps. I have several question and looking for help:

  1. Where does the NPF get the time information to timestamp these incoming packet? The time information comes from a onboard timer in the adapter or from a CPU or similar computer clock?

--GV--