Wireshark-dev: Re: [Wireshark-dev] I need help: When the timestamp is created ??
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 26 Aug 2011 02:45:41 -0700
On Aug 26, 2011, at 1:48 AM, Moussa.Alawieh@xxxxxxxxxxxxxxxxxxx wrote:

> I want to know ,  when the  libpcap library take the timestamp, that appears in the Wireshark field "Arrival Time", 
> in the Physics Layer of (OSI layers) or in the MAC layer, or where ???? 

	http://www.tcpdump.org/faq.html#q8