[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    [Wireshark-users] question about internal work of time-functions
From:       Steffen_Röttig <steff_privat () t-online ! de>
Date:       2006-10-30 16:23:11
Message-ID: 454626EF.60408 () t-online ! de
[Download RAW message or body]

hi...
i have a little question about the internal work.
wireshark can choose about 4 time-views. i think as resource for the 
views is the timestruct in the ethernet-header. or not?
are the function for the views wireshark-functions or is it a feature of 
winpcap?

i.e. does wireshark gets the packet from winpcap, puts the time from the 
packet and compare it to the packet before (view - since last packet)
or is there a function in winpcap and wireshark calls only 
getTimeSinceLastPacket() ??

thanks

regards
pitrie

[prev in list] [next in list] [prev in thread] [next in thread]