Endace Measurement Systems.
http://www.endace.com
EDM01.05-10r1 DAG 4.3S Card User Manual
39
Revision 6. 22 September 2005.
7.1 Data Formats
, continued
Data format
, continued
Data Format
Description
Lctr:
loss counter
A 16 bit counter, recording the number of
packets lost since the previous record between
the DAG card and memory hole due to
overloading on PCI bus.
The counter starts at zero, and sticks at 0xffff.
Wlen:
wire length
Packet length including some protocol overhead.
The exact interpretation of this quantity depends
on physical medium.
7.2 Timestamps
Description
The ERF format incorporates a hardware generated timestamp of the
packet’s arrival.
The format of this timestamp is a single little-endian 64-bit fixed point
number, representing seconds since midnight on the first of January 1970.
The high 32-bits contain the integer number of seconds, while the lower
32-bits contain the binary fraction of the second. This allows an ultimate
resolution of 2
-32
seconds, or approximately 233 picoseconds.
Another advantage of the ERF timestamp format is that a difference
between two timestamps can be found with a single 64-bit subtraction. It
is not necessary to check for overflows between the two halves of the
structure as is needed when comparing Unix time structures, which is also
available to Windows users in the Winsock library.
Different DAG cards have different actual resolutions. This is
accommodated by the lowermost bits that are not active being set to zero.
In this way the interpretation of the timestamp does not need to change
when higher resolution clock hardware is available.
Continued on next page
