Date: Wed, 10 Apr 2002 15:01:16 -0400 From: Manikantan Ramadas <mramadas@cs.ohiou.edu> Subject: Re: timestamp range in tcptrace Message-ID: <20020410150116.A20080@masaka.cs.ohiou.edu>
Chong,
The timestamps you are talking about are given by pcap library and not
necessarily the timestamps from the TCP timestamp option. If we are adding a
filtering option in tcptrace, it makes sense to add one that processes
timestamps in TCP options and not those given by the pcap library.
There is already a program called "tcpslice" that you can use to cut thru'
a huge tcpdump file and capture portions of it that you want. You might want
to use that to get the portion of dump file you want and then run tcptrace
on it.
- Mani.
"Imagination is more important than knowledge" - Einstein.
___________________________________________________________________
Manikantan Ramadas -- IRG -- http://irg.cs.ohiou.edu/~mramadas
___________________________________________________________________
----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.
This archive was generated by hypermail 2b30 : 04/11/02 EDT