Ethereal-dev: Re: [Ethereal-dev] mesuring processing time at a node

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 28 Nov 2002 14:15:52 -0800
On Thu, Nov 28, 2002 at 12:20:31PM -0800, np linux wrote:
> Now, the question: Is doing so a right way to measure the processing
> time, as we are not sure where exactly does libcap captures the
> packates.  Is it right before network driver or after it ao anywhere
> else?

On Linux, libpcap captures packets using PF_PACKET sockets (or, on 2.0
kernels or with libpcap built on a 2.0-kernel system,
PF_INET/SOCK_PACKET sockets).  Packet time stamps come from the Linux
networking code.

I don't have time right now to once again plow through the Linux
networking code to check where those packets are picked up; I'd suggest
reading the Linux networking code yourself, or asking somebody on, say,
the linux-net mailing list.