Wireshark-users: [Wireshark-users] Writing PcapNG with nanosecond timestamps
From: Erik Hjelmvik <erik.hjelmvik@xxxxxxxxx>
Date: Mon, 3 Dec 2012 14:37:17 +0100
The Pcap-NG file format has support for using nano-second resolution
timestamps, and from what I understand Wireshark uses nanoseconds
internally. However, I'm not able to get Wireshark or dumpcap to write
pcapng files with nanosecond resolution. All I get is the default
microsecond timestamps.

Is there some switch or setting in Wireshark or dumpcap that I can use
in order to enable nanosecond timestamps in the output pcapng file?

/erik
-- 
blog: http://www.netresec.com/?page=Blog
twitter: http://twitter.com/netresec
current project: http://pcapng.com