libpcap timestamp resolution

Asked Jun 20 '16 at 01:16

Active Jun 20 '16 at 03:30

Viewed 717 times

I am using python module pypcap (simplified object-oriented Python wrapper for libpcap). I am having troubles with timestamp resolution. In my pcap file I can see my packets have nanosecond precision, but when I parse the pcap file in python and extact the timestamp from a particular packet, it only has microsecond precision?

import pcap
for ts, pkt in pcap.pcap():
    print ts, `pkt`

ts has microsecond precision. I want nanosecond precision, any ideas? Thanks

edited Jun 20 '16 at 03:30

martineau

119,623
25
170
301

asked Jun 20 '16 at 01:16

Jonathon Hill

1,007
4
16
23

Related? http://stackoverflow.com/questions/21764341/pcap-nanoseconds-python – rrauenza Jun 20 '16 at 01:22
Yes, it is definately related. But I would prefer not to modify the modules source code unless 100% necessary. This is a very brutal solution. Whats when you bump versions? – Jonathon Hill Jun 20 '16 at 01:31
Did the getts() answer make any sense there? I suspect it doesn't, but don't want you to miss it. – rrauenza Jun 20 '16 at 01:32
To be honest, no his solution doesn't make sense to me – Jonathon Hill Jun 20 '16 at 01:35
Old question, anyone ever find a solution to this? Other than modifying the module's source code – spencer Jan 15 '18 at 21:37
It looks like nanosecond precision is supported by the latest version now. – Kyle Aug 14 '19 at 20:18

libpcap timestamp resolution

0 Answers0