Ethereal-dev: Re: [Ethereal-dev] timestamp resolution

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Hamish Moffatt <hamish@xxxxxxxxxxxx>
Date: Wed, 23 Jan 2002 21:52:48 +1100
On Tue, Jan 22, 2002 at 02:57:05PM -0800, Guy Harris wrote:
> > It seemed to me that none of the current capture file format supported
> > by wiretap have sub-microsecond resolution anyway,
> 
> If by "supported" you mean "supported for reading", iptrace 2.0 (from,
> surprise surprise, IBM) does.  There might be others.

Actually, I'm fussy and I need writing as well. Here's why:

I'm usually not capturing off a live interface. I'm running a software
simulation of a system. The simulation logs its generated packets
to file. I use a perl script to generate something that I can
read with text2pcap, and then look at the packets in Ethereal.
I'm using Ethereal for its protocol decoding.

Anyway, I'll hack something up if I need it badly enough.
Actually, I think it would be kind of neat to turn text2pcap
into text2wiretap; for one thing, it's a lot easier to specify
the link layer type (eg editcap versus text2pcap). I might
work on that some time.

Hamish
-- 
Hamish Moffatt VK3SB <hamish@xxxxxxxxxx> <hamish@xxxxxxxxxxxx>