Ethereal-dev: Re: [Ethereal-dev] mesuring processing time at a node

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 28 Nov 2002 14:15:52 -0800
On Thu, Nov 28, 2002 at 12:20:31PM -0800, np linux wrote:
> Now, the question: Is doing so a right way to measure the processing
> time, as we are not sure where exactly does libcap captures the
> packates.  Is it right before network driver or after it ao anywhere
> else?

On Linux, libpcap captures packets using PF_PACKET sockets (or, on 2.0
kernels or with libpcap built on a 2.0-kernel system,
PF_INET/SOCK_PACKET sockets).  Packet time stamps come from the Linux
networking code.

I don't have time right now to once again plow through the Linux
networking code to check where those packets are picked up; I'd suggest
reading the Linux networking code yourself, or asking somebody on, say,
the linux-net mailing list.