[Winpcap-bugs] under high load, winpcap not working properly

David Baliko davidbaliko at hotmail.com
Mon Jun 11 21:01:07 GMT 2007


hi all!

i'm used to work on my low-level development and i needed an interface to 
windows through ethernet, at this point comed the winpcap, unfortunetly when 
i was done with my program and started to test the system, i discovered that 
if i transfer at the maximum speed, the winpcap is unable to capture my 
packets no mather what parameters i set, so i started to look for the 
problem and found that if i want to access to the kernel buffer efficiently, 
sure i need to use a big transfer buffer, but it happen that if i set this 
high the kernel transfer take time, no mather the actual winpcap kernel 
buffer level, i hope you see the nonsense here: if i set the transfer buffer 
to small then i need to call the readfile fn too often to avoid packet loss 
so this is not optimal even nor is not working, and if i set the transfer 
buffer to big then it is not working also because even an empty buffer 
reading is taking as many times as the full buffer reading  :)

so for me the solution was that i hacked a little the driver, now i have a 
message (variable) that show me the actual kernel buffer level, so now i'm 
reading as many bytes as exactly the level of the internal buffer, and 
belive it or not, now everything is working like a charm

so i think you sould consider to put something like this into the official 
winpcap

thanks for the attention

david

_________________________________________________________________
Don't just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/



More information about the Winpcap-bugs mailing list