<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1528" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=609011118-07022006><FONT face=Arial color=#0000ff size=2>The
product was released before the final version of WinPCap
3.1...</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> winpcap-users-bounces@winpcap.org
[mailto:winpcap-users-bounces@winpcap.org] <B>On Behalf Of </B>Gianluca
Varenni<BR><B>Sent:</B> Tuesday, February 07, 2006 7:24 PM<BR><B>To:</B>
winpcap-users@winpcap.org<BR><B>Subject:</B> Re: [Winpcap-users] stop getting
packets from a NIC on blade server<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=Noam.Pelles@verint.com href="mailto:Noam.Pelles@verint.com">Pelles,
Noam</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, February 06, 2006 3:47
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] stop getting
packets from a NIC on blade server</DIV>
<DIV><FONT size=2></FONT><BR></DIV>
<DIV>
<DIV><SPAN class=937405407-26092005><FONT face=Arial
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><FONT face=Arial size=2>I am writing a
network sniffer that uses WinPCap <SPAN class=015023811-06022006> 3.1
Beta </SPAN>on Win 2000\2003 servers.</FONT></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV></DIV></BLOCKQUOTE>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>Uhm, why are you using a beta of WinPcap 3.1 instead of the
release version of 3.1? </FONT></SPAN></SPAN></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><SPAN class=937405407-26092005><SPAN
class=015023811-06022006></SPAN></SPAN><SPAN class=937405407-26092005><SPAN
class=015023811-06022006><FONT face=Arial
size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>This application works fine under any server I have used
till now,</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>but recently I have installed it on blade server, and
crossed strange behavior :</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>When my application starts it is capturing packets from
period of time , then packets stops for any
reason.</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>When using other application that uses WinPCap ( Packetyzer
) I get the same result ( even when their buffer is not
full).</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV></BLOCKQUOTE>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>Can you tell me which exact version of WinPcap are you using?
Is it a beta of 3.1? If so, please upgrade to WinPcap 3.1
final.</FONT></SPAN></SPAN></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>When I use Ethereal in regular mode( not displaying packets
in real time ) also the packets stops after few seconds , only when I check
the </FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>option of " Update list of packets in real time"
packets are being captured all the time.</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>Is there any time out that tell the adapter \ driver to stop
capture ?</FONT></SPAN></SPAN></DIV></BLOCKQUOTE>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>No.</FONT></SPAN></SPAN></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>What different setting the Ethereal is using when checking
the real time option ?</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV></BLOCKQUOTE>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>No different setting, it's basically something done at the UI
level (not in the capture driver).</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>Have a nice day</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>GV</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2>Thanks</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=937405407-26092005><SPAN class=015023811-06022006><FONT
face=Arial size=2></FONT></SPAN></SPAN> </DIV>
<TABLE>
<TBODY>
<TR>
<TD bgColor=#ffffff><FONT
color=#000000>__________________________________________________________________________________________<BR>This
electronic message contains information from Verint Systems, which may
be privileged and confidential. <BR>The information is intended to be
for the use of the individual(s)or entity named above. <BR>If you are
not the intended recipient, be aware that any disclosure, copying,
distribution or use of the contents of this information is prohibited.
<BR>If you have received this electronic message in error, please notify
us by replying to this email (1).<BR><BR></FONT></TD></TR></TBODY></TABLE>
<P></P><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>
<table><tr><td bgcolor=#ffffff><font color=#000000>__________________________________________________________________________________________<br>
This electronic message contains information from Verint Systems, which may be privileged and confidential. <br>
The information is intended to be for the use of the individual(s)or entity named above. <br>
If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. <br>
If you have received this electronic message in error, please notify us by replying to this email (1).<br>
<br>
</font></td></tr></table>