Endace Measurement Systems Limited
http://www.endace.com
EDM01.05-04r1 DAG 3.6GE User Manual
Copyright, all rights reserved.
29
Revision 7. 22 September 2005.
6.1 Data Formats
, continued
Table
Table 7-2 shows the Type 2 Ethernet variable length record. The diagram
is not to scale.
timestamp
timestamp
type:2 flags
rlen
lctr wlen
offset pad
rlen-18
bytes of frame
Table 7-2. Type 2 Ethernet Variable Length Record.
The Ethernet frame begins immediately after the pad byte so that the layer
3 [IP] header is 32Bit-aligned.
7.2 Timestamps
Description
The ERF format incorporates a hardware generated timestamp of the
packet’s arrival.
The format of this timestamp is a single little-endian 64-bit fixed point
number, representing seconds since midnight on the first of January 1970.
The high 32-bits contain the integer number of seconds, while the lower
32-bits contain the binary fraction of the second. This allows an ultimate
resolution of 2
-32
seconds, or approximately 233 picoseconds.
Another advantage of the ERF timestamp format is that a difference
between two timestamps can be found with a single 64-bit subtraction. It
is not necessary to check for overflows between the two halves of the
structure as is needed when comparing Unix time structures, which are
also available to Windows users in the Winsock library.
Different DAG cards have different actual resolutions. This is
accommodated by the lowermost bits that are not active being set to zero.
In this way the interpretation of the timestamp does not need to change
when higher resolution clock hardware is available.
Continued on next page
