packet-agent adds timestamp before output pcaps

Question

packet-agent adds timestamp before output pcaps

longxu-sd opened this issue 5 years ago · comments

longxu-sd commented 5 years ago

I hope that packet-agent adds timestamp(with ns), before output pcap.

vincent.ye · Answer 1 · Wed Oct 09 2019 15:20:39 GMT+0800 (China Standard Time)

We plan to support timestamp by ERSPAN marker packet interval.

longxu-sd · Answer 2 · Thu Oct 10 2019 09:48:41 GMT+0800 (China Standard Time)

ERSPAN looks like supported by Cisco switch. If customer uses Cloud, it will be double GRE head before real packet(one added by pkt-agent, another added by Cloud platform). If you use some switch function to support timestamp, it will be written in the first GRE head, and will be dismantled by Cloud platform before sending it to target system.

My proposal is support timestamp in real packet. Then the target system can use it directly.

Vader · Answer 3 · Thu Oct 10 2019 15:09:36 GMT+0800 (China Standard Time)

ERSPAN is good, packing timestamp in real packet is another method e.g. VSS Monitoring tap can add a packet trail for additional information. I believe BPC can support ERSPAN as well

…

On Thu, Oct 10, 2019 at 9:48 AM longxu-sd ***@***.***> wrote: ERSPAN looks like supported by Cisco switch. If customer uses Cloud, it will be double GRE head before real packet(one added by pkt-agent, another added by Cloud platform). If you use some switch function to support timestamp, it will be written in the first GRE head, and will be dismantled by Cloud platform before sending it to BPC. My proposal is support timestamp in real packet. Then BPC can use it directly. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#63>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADW3OZ6SGDUCQTQKYAROGDQN2CXVANCNFSM4I62ZIBQ> .