[Winpcap-users] Packet Capture Timestamp

[Oren Becker]

What about an IDS running over winpcap? Does it need the timestamp?

----- Original Message ----- 
From: "Ben Greear" <greearb at candelatech.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, June 23, 2005 8:10 PM
Subject: Re: [Winpcap-users] Packet Capture Timestamp


> Oren Becker wrote:
>> Hi.
>>  I'd like to know why it is important to put a timestamp on each packet 
>> that is captured.
>
> The length of time between packets can tell a great deal about how 
> protocols
> are performing.  (Think protocols like TCP that acknowledge packets...)
>
> Ben
>
> -- 
> Ben Greear <greearb at candelatech.com>
> Candela Technologies Inc  http://www.candelatech.com
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users