Thanks for all the replies.
One more thing I would like to ask is, one thing I've noticed that the last three digits of time shown in Wireshark till nanosecs precision are always zero (for every packet).
For eg. Arrival Time: Oct 23, 2013 23:21:07.388979000 IST.
In the above case also the last three digits in .388979000 are zero, which means microsecs are multiplied with 1000 to get the nanosecs.
Can somebody please clarify more on this as to how the nanosecs obtained?
-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Friday, June 27, 2014 12:34 AM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Absolute arrvial time of packet in wireshark
On Jun 26, 2014, at 7:31 AM, Vishnu Bhatt <vishnu.bhatt@xxxxxxxxxxx> wrote:
> Thanks for the reply. But I am talking of the following time:
That *is* the time that Wireshark gets from libpcap/WinPcap.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."