Ethereal-dev: Re: [Ethereal-dev] timestamp resolution

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 21 Jan 2002 10:57:42 -0800 (PST)
> Speaking of timestamps, it seems that only a couple of the formats
> read by wiretap support sub-microsecond timestamp resolution
> (specifically, the AIX libpcap variant, and the iptrace 2.0 format),
> and it looks like wiretap can't write either of them.
> 
> Any suggestions as to what we could do about this? 
> I'm particularly looking for 1 ns nanosecond resolution,
> although if we're going to change it, picosecond
> couldn't hurt (:-)). I'm actually not capturing using
> Ethereal in this case, just viewing externally captured 
> or even generated data files.

Ethereal's time stamp data types have nanosecond resolution (they have
32-bit second and 32-bit nanosecond timings; a different format would
have to be chosen to get higher resolution).

We could make Wiretap support nanosecond resolution as well, by
multipying microsecond values by 1000.