<div>Hi,</div> <div> </div> <div>I am building a Win 32 application pair to monitor the SIP flow on a gateway. Basically the machine running the monitor applications is connected to a hub with the gateway. Main application monitors the SIP flow and runs sub-applications according to the SIP informations. Sub-applications monitor the RTP flows on forward and reverse directions. So all sub-applications have 2 pcap_t handles plus the main has 1. All have unique filters on the same adapter. Yes, the sub-applications are better be threads but there are some other restrictions irrelevant to wpcap that forces me to make them as applications.</div> <div> </div> <div>The machine runs on Win XP 32 bit with 2 GB of ram, with all unnecessary services removed. Applications run smooth on around 60 channels ( that makes 60*2 + 1 => 121 handles ). But when the channel count exceeds this boundry, findalldevs and open_live starts to fail. The errors are
generally :</div> <div> </div> <div class=MsoNormal><SPAN style="COLOR: black">Error in pcap_findalldevs: PacketGetAdapterNames: ERROR_INSUFFICIENT_BUFFER(122)</SPAN></div><SPAN style="COLOR: black"> <div class=MsoNormal><SPAN style="COLOR: black"></SPAN> </div> <div class=MsoNormal><SPAN style="COLOR: black">Unable to open the adapter. <adapter> is not supported by WinPcap - errbuf :(NULL)</SPAN></div> <div class=MsoNormal><SPAN style="COLOR: black"></SPAN> </div> <div class=MsoNormal><SPAN style="COLOR: black">Unable to open the adapter. <adapter> </SPAN><SPAN style="COLOR: black">is not supported by WinPcap - errbuf : Cannot determine the network type(0)</SPAN></div> <div class=MsoNormal><SPAN style="COLOR: black"></SPAN> </div> <div class=MsoNormal><SPAN style="COLOR: black">And mostly :</SPAN></div><SPAN style="COLOR: black"> <div class=MsoNormal><SPAN style="COLOR: black">Unable to open the adapter. <adapter>
is not supported by WinPcap - errbuf : driver error: not enough memory to allocate the kernel buffer</SPAN><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"> <?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p> </o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000>First observations showed that when the total memory consumptions exceed 1GB errors start. Thought to be a paging issue and disabled paging but did not give a cure. As there is around 1 GB free physical ram available, I focussed on the kernel memory usage, and found that the errors start as soon as the non-paged kernel memory usage reaches around 256 MB ( which is the limit for all Win 32 versions AFAIK ). Besides the CPU usage is
very acceptable under all circumstances.</FONT></o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p></o:p></SPAN> </div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000>Can anyone clarify the reason for these errors I am getting? Is it memory, handle limitations? And I'd be thankful on suggestions on a solution. I already admit that everything has a limit but a way to tripple or double the channel count ( e.g. monitoring 180-120 channels ) would be quite useful.</FONT></o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000></FONT></o:p></SPAN> </div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000>As a note I am using the WinPcap 4.0.2.
</FONT></o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p></o:p></SPAN> </div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000>My best regards,</FONT></o:p></SPAN></div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p></o:p></SPAN> </div> <div class=MsoNormal><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: 'Arial','sans-serif'"><o:p><FONT color=#000000>Hakan.</FONT></o:p></SPAN></div><o:p></o:p><o:p></o:p></SPAN><o:p></o:p></SPAN><p>