PCAP Nano Support about dpkt

[kbandla]

From [email protected] on December 24, 2014 23:00:31

I am assuming that you are doing something like this:
for ts, buf in pcap:
print ts

And then you observe the timestamp to be "1408173480.93" instead
of "1408173480.936543", as shown in wireshark. This is because the print
function in python limits float to two decimal places.

Example:

x = 1258494066.119061
x
1258494066.119061
print x
1258494066.12

If you really need to print the full value, use format:

"{0:.6f}".format(x)
'1258494066.119061'

If you have a nanosecond capture file, the place you will need to make the change is in the iter() function of the pcap.py module. Instead of dividing hdr.tv_usec by 1000000.0, you will need to divide it by 1000000000.0

Status: Duplicate
Owner: [email protected]
Mergedinto: 129