wireshark 如何计算以太网帧的到达时间 [英] how does wireshark calculate the arrival time of ethernet frames

问题描述

我正在尝试编写一个将以太网帧到达时间记录到数据库的 c 应用程序.我一直在用wireshark做一些分析，可以看到它显示了帧的到达时间.我将使用 libcap 来分析 pcap 文件，我收集到 wireshark 也使用 pcap 文件.我的问题是wireshark如何计算帧的到达时间?

I'm trying to write a c application that logs ethernet frame arrival times to a database. I been doing some analysis with wireshark and can see that it displays the arrival time of the frame. I'm going to use libcap which analyses the pcap file and I gather wireshark also uses the pcap file. My question is how does wireshark calculate the arrival time of frames?

推荐答案

来自 https://www.wireshark.org/docs/wsug_html_chunked/ChAdvTimestamps.html:

在捕获时，Wireshark 从 libpcap (WinPcap) 库中获取时间戳，而后者又从操作系统内核中获取它们.

这篇关于wireshark 如何计算以太网帧的到达时间的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！