[np linux <nitin_linux@xxxxxxxxx>]

Hi Guy,

--- Guy Harris <gharris@xxxxxxxxx> wrote:
> On Thu, Nov 28, 2002 at 12:20:31PM -0800, np linux
> wrote:
> > Now, the question: Is doing so a right way to
> measure the processing
> > time, as we are not sure where exactly does libcap
> captures the
> > packates.  Is it right before network driver or
> after it ao anywhere
> > else?
> 
> On Linux, libpcap captures packets using PF_PACKET
> sockets (or, on 2.0
> kernels or with libpcap built on a 2.0-kernel
> system,
> PF_INET/SOCK_PACKET sockets).  Packet time stamps
> come from the Linux
> networking code.
> 
> I don't have time right now to once again plow
> through the Linux
> networking code to check where those packets are
> picked up;
i will really appreciate if you can point me to some
place in archive or some where else where I can find
this information. I have posted to net-linux still
waiting for any reply.

Thanks,
NItin


 I'd suggest
> reading the Linux networking code yourself, or
> asking somebody on, say,
> the linux-net mailing list.
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
>
http://www.ethereal.com/mailman/listinfo/ethereal-dev


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com