Packet Time-Stamping

Each and every packet entering an Endace device is assigned an exclusive Extensible Record Format (ERF) header. 16 bytes in total, the ERF is applied in hardware, and comprises two, eight byte sub fields; a 64 timestamp, sufficient to provide time resolution with nanosecond granularity and an 8 byte information field that includes protocol field and wire length.

At a basic level, timing is provided using Network Time Protocol, or NTP. For applications that require highly precise time-stamps, the DAG Universal Clock Kit (DUCK) syncs NTP to a pulse per second (PPS) feed from an atomic clock. This clock is typically terminated using a GPS or CDMA receiver, which in turn provides PPS to an Endace DAG® card. This clock feed can then be distributed to additional DAG cards or Ninja platforms using the Endace TDS accessories or IEEE1588/PTP techniques.