<html><head><meta http-equiv='Content-Type' content='text/html; GB2312'><style type='text/css'><!--.style3 {color: #0072A8}--></style></head><body bgcolor='#FFFFFF' topmargin='5' leftmargin='5' rightmargin='5' bottommargin='5' marginwidth='0' marginheight='0'><FONT face=宋体>Hi guys:<BR><!-- --> i use wireshark to capture data at 480Mbps and found packets lost when wireshark indicate that "Drop" is zero and "Receive but no buffer" is not zero. So I learned the sourcecode of wireshark and winpcap , found that "Receive but no buffer" in wireshark come from PacketRequest() in packet32.dll using DeviceIoControl() and the function code is "OID_GEN_RCV_NO_BUFFER", which MSDN explains like :<BR><!-- --><BR><!-- --></FONT>
<P class=MsoNormal style="MARGIN: 0cm 0cm 7.5pt; VERTICAL-ALIGN: top; LINE-HEIGHT: 140%; TEXT-ALIGN: left; mso-pagination: widow-orphan" align=left><FONT face=宋体><SPAN lang=EN-US style="COLOR: black; LINE-HEIGHT: 140%; FONT-FAMILY: Verdana; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">As a query, the OID_GEN_RCV_NO_BUFFER OID specifies the number of frames that the NIC cannot receive </SPAN><SPAN lang=EN-US style="COLOR: red; LINE-HEIGHT: 140%; FONT-FAMILY: Verdana; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt">due to lack of NIC receive buffer space</SPAN></FONT><SPAN lang=EN-US style="COLOR: black; LINE-HEIGHT: 140%; FONT-FAMILY: Verdana; mso-bidi-font-size: 10.5pt; mso-bidi-font-family: 宋体; mso-font-kerning: 0pt"><FONT face=宋体>. Some NICs do not provide the exact number of missed frames; they provide only the number of times at least one frame is missed.<BR><!-- --><BR><!-- -->Is that means my NIC hardware buffer is too small? <BR><!-- -->Can i improve reading speed by recompiling npf.sys to fix this problem?</FONT></SPAN></P></body></html>