Ethereal-dev: Re: [Ethereal-dev] timestamp resolution

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 21 Jan 2002 10:57:42 -0800 (PST)
> Speaking of timestamps, it seems that only a couple of the formats
> read by wiretap support sub-microsecond timestamp resolution
> (specifically, the AIX libpcap variant, and the iptrace 2.0 format),
> and it looks like wiretap can't write either of them.
> 
> Any suggestions as to what we could do about this? 
> I'm particularly looking for 1 ns nanosecond resolution,
> although if we're going to change it, picosecond
> couldn't hurt (:-)). I'm actually not capturing using
> Ethereal in this case, just viewing externally captured 
> or even generated data files.

Ethereal's time stamp data types have nanosecond resolution (they have
32-bit second and 32-bit nanosecond timings; a different format would
have to be chosen to get higher resolution).

We could make Wiretap support nanosecond resolution as well, by
multipying microsecond values by 1000.