Ethereal-dev: Re: [Ethereal-dev] timestamp resolution

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Hamish Moffatt <hamish@xxxxxxxxxxxx>
Date: Wed, 23 Jan 2002 21:52:48 +1100
On Tue, Jan 22, 2002 at 02:57:05PM -0800, Guy Harris wrote:
> > It seemed to me that none of the current capture file format supported
> > by wiretap have sub-microsecond resolution anyway,
> 
> If by "supported" you mean "supported for reading", iptrace 2.0 (from,
> surprise surprise, IBM) does.  There might be others.

Actually, I'm fussy and I need writing as well. Here's why:

I'm usually not capturing off a live interface. I'm running a software
simulation of a system. The simulation logs its generated packets
to file. I use a perl script to generate something that I can
read with text2pcap, and then look at the packets in Ethereal.
I'm using Ethereal for its protocol decoding.

Anyway, I'll hack something up if I need it badly enough.
Actually, I think it would be kind of neat to turn text2pcap
into text2wiretap; for one thing, it's a lot easier to specify
the link layer type (eg editcap versus text2pcap). I might
work on that some time.

Hamish
-- 
Hamish Moffatt VK3SB <hamish@xxxxxxxxxx> <hamish@xxxxxxxxxxxx>