[Winpcap-users] MODE_STAT

[Fitt, Jonathan]

Ok, so I've done some more investigation and it's still somewhat odd.
I have a loop with a pcap_open to_ms set to 100ms. Every time the
callback function is called I record:
The time from the results header
The "tick" count which is a pretty good system time
The number of packets in the results
 
The tick count shows that it's pretty reliably being called every 100ms
(although not always presumably another system thread grabs focus?)
 
I need to know if the header time can be trusted? If it says x packets
were received at time Y do I trust that and assume that it's got out of
order somehow, or do I rely on the time that the callback is actually
called (which is every 100ms as I want)?
 
Packet Header Time	 Tick	 No. Packets	 Packet Header Diff
Tick Diff	
1197325744.945760	 27105555	 0	 		
1197325745.514290	 27105655	 0	 568.530	 100	
1197325745.146640	 27105756	 0	 -367.650	 101	
1197325745.245990	 27105856	 0	 99.350	 100	
1197325745.346160	 27105956	 0	 100.170	 100	
1197325745.446320	 27106056	 0	 100.160	 100	
1197325745.546830	 27106156	 0	 100.510	 100	
1197325745.646580	 27106256	 0	 99.750	 100	
1197325745.746730	 27106356	 4	 100.150	 100	
1197325745.846900	 27106457	 1	 100.170	 101	
1197325745.947030	 27106557	 0	 100.130	 100	
1197325746.527660	 27106657	 0	 580.630	 100	
1197325746.149130	 27106757	 0	 -378.530	 100	
1197325746.248870	 27106857	 1	 99.740	 100	
1197325746.347600	 27106957	 0	 98.730	 100	
1197325746.447760	 27107057	 1	 100.160	 100	
1197325746.548390	 27107158	 0	 100.630	 101	
1197325746.648020	 27107258	 0	 99.630	 100	
1197325746.748180	 27107358	 0	 100.160	 100	
1197325746.848340	 27107458	 0	 100.160	 100	
1197325746.948470	 27107558	 0	 100.130	 100	
1197325747.548270	 27107658	 0	 599.800	 100	
1197325747.148750	 27107758	 0	 -399.520	 100	
1197325747.252510	 27107859	 2	 103.760	 101	
1197325747.349040	 27107959	 0	 96.530	 100	
1197325747.449170	 27108059	 0	 100.130	 100	
1197325747.563210	 27108169	 0	 114.040	 110	
1197325747.659880	 27108269	 0	 96.670	 100	
1197325747.759660	 27108369	 0	 99.780	 100	
1197325747.859770	 27108469	 0	 100.110	 100	
1197325747.959910	 27108570	 0	 100.140	 101	
1197325748.668550	 27108670	 0	 708.640	 100	
1197325748.160230	 27108770	 0	 -508.320	 100	
 
....
 
1197325758.935910	 27119545	 0	 100.350	 100	
1197325759.358340	 27119645	 2	 422.430	 100	
1197325759.136200	 27119746	 0	 -222.140	 101	
1197325759.236420	 27119846	 0	 100.220	 100	
1197325759.493020	 27120096	 0	 256.600	 250	
1197325759.626880	 27120236	 0	 133.860	 140	
1197325759.729230	 27120336	 0	 102.350	 100	
1197325759.831530	 27120437	 0	 102.300	 101	
1197325759.937610	 27120547	 0	 106.080	 110	
1197325760.622420	 27120667	 0	 684.810	 120	
1197325760.207600	 27120817	 0	 -414.820	 150	
1197325760.307950	 27120917	 0	 100.350	 100	
1197325760.412920	 27121017	 0	 104.970	 100	
1197325760.507980	 27121118	 2	 95.060	 101	
1197325760.667990	 27121268	 0	 160.010	 150	
1197325760.770390	 27121378	 0	 102.400	 110	
1197325760.868490	 27121478	 0	 98.100	 100	
1197325760.968630	 27121578	 0	 100.140	 100	
1197325761.742020	 27121678	 0	 773.390	 100	
1197325761.168980	 27121779	 0	 -573.040	 101	
1197325761.269010	 27121879	 0	 100.030	 100	
1197325761.369980	 27121979	 0	 100.970	 100	
1197325761.470030	 27122079	 0	 100.050	 100	
1197325761.569470	 27122179	 0	 99.440	 100	
1197325761.669880	 27122279	 0	 100.410	 100	
1197325761.769770	 27122379	 0	 99.890	 100	
1197325761.869920	 27122480	 0	 100.150	 101	
1197325761.970060	 27122580	 0	 100.140	 100	
1197325762.775780	 27122680	 2	 805.720	 100	
1197325762.170430	 27122780	 0	 -605.350	 100