Re: time stamping 802.11n miniport tx packets



Why your adapter can't timestamp the packets?
It's internal clock may be be more precise than 16 ms.

--PA

"beninghaus" <beninghaus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:FFA3B515-A972-4B87-B1B9-63BF90BF0BEE@xxxxxxxxxxxxxxxx


I have been lead to believe from MS documentation that the
NdisGetCurrentSystemTime() function should be used to timestamp packets.
However the documentation also indicates that NdisGetCurrentSystemTime() is
only updated once every system tick. That implies to me between 10-16ms.
Yikes!

Do I have the wrong information about NdisGetCurrentSystemTime()?

I am working on an 802.11n miniport driver and I need to time stamp outgoing
packets when they arrive at the driver MiniportSendPackets() function.

This time stamp will later need to be calibrated to coincide with the timer
synchronization function (BEACON.TSF). TSF values are in the microsecond
range.

Can I use KeQueryPerformanceCounter() to get sub millisecond timestamps?

What is the best case resolution? In other words I'd like the incoming
packets to each have a unique timestamp and not the same value I could get
through NdisGetCurrentSystemTime().

Can a miniport driver make this call and still pass WHQL?



.



Relevant Pages

  • [REVS] TCP Timestamp and Advanced Fingerprinting
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... current and average uptime of specific operating systems running on the ... By grabbing the value of timestamp of such operating system ... TCP timestamps values are inserted in many TCP packets (such as SYN, ...
    (Securiteam)
  • RE: [PATCH] Add ioctl to disable bpf timestamping
    ... packets and has the snap length set to get the whole packet. ... With no timestamp I can get 200 kpps. ... I think an ioctl is the right way to do it, ... realtime inspection like Snort may not care about timestamps while ...
    (freebsd-net)
  • TCP timestamp & advanced fingerprinting
    ... attached is a paper from one of our students about using the TCP ... analysis of various operating systems should reveal how analyzing timestamps ... the timestamp value of one point each 500 milliseconds. ... value in their SYN packets, but Windows-based operating systems does not. ...
    (Bugtraq)
  • Re: cwnd and sstresh monitor
    ... (kernel patch, kernel module, etc?), and how would this be done best? ... but there is a TCPDEBUG kernel option that gathers TCP state information for debugging and tracing purposes. ... I also modified the iptimefunction to provide microsecond resolution instead of miliseconds, because most of the packets have the same timestamp attached. ...
    (freebsd-hackers)
  • Re: SQL raw network connection
    ... > I don't think that TDS is documented by Microsoft but you can have a look ... > Jasper Smith (SQL Server MVP) ... >> I need an explanation of the various bytes located in the packets. ... >> It would be great if I could get some type of documentation on the ...
    (microsoft.public.sqlserver.connect)