<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16809" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=alessandro@totalwire.it
href="mailto:alessandro@totalwire.it">Alessandro Capucci</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Friday, April 10, 2009 3:18
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] NPF Device
Driver</DIV>
<DIV><FONT size=2></FONT><FONT size=2></FONT><BR></DIV>
<P>Hello to every body,<BR>I'm new in WinPCap library... I'm study it for an
interesting new project... 10GBit deep packet inspection. I'm try to connect
directly with WinPCap NPF driver for best performance. All work fine on my
1GBit adapter! Next week I'll hope to star test with 10GBit
adapter.<BR></P></BLOCKQUOTE>
<P><FONT size=2>By "connecting directly to the WinPcap Driver" you mean calling
the Packet API directly?</FONT></P><FONT size=2></FONT>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"><FONT
size=2></FONT><FONT size=2></FONT><FONT size=2></FONT><FONT size=2></FONT>
<P><BR>I've some question: <BR><BR>0) Do you think that NPF driver with a
good hardware can be able to capture 10GBit ethernet packet without sensible
packet lost ?<BR></P></BLOCKQUOTE>
<P><FONT size=2>No, I don't think so. Capturing at 10Gbps, expecially in the
worst case i.e. 64byte packets, it's an extremely challenging task. Even custom
capture cards (which cost thousands of dollars) have a very hard time dealing
with such an amount of packets.</FONT></P>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<P>1) Packet.dll functions are callable in multithread applications ? For
example can I call PacketReceivePacket or <FONT size=2>PacketGetStats
</FONT> in two different concurent thread on the same device ? Are
serialized ?</P></BLOCKQUOTE>
<P><FONT size=2>In general the functions are not thread safe when working on the
same LPADAPTER structure.</FONT></P>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<P>2) WinPCap NPF drive is able to take advantage of RSS (Receive Side
Scaling) availble in Win2008 server (<A
href="http://msdn.microsoft.com/en-us/library/ms795609.aspx">http://msdn.microsoft.com/en-us/library/ms795609.aspx</A>)?</P></BLOCKQUOTE>
<P><FONT size=2>No.</FONT></P><FONT size=2></FONT>
<P><FONT size=2>Have a nice day<BR></FONT><FONT size=2>GV</FONT></P>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"><FONT
size=2></FONT><FONT size=2></FONT><FONT size=2></FONT>
<P><BR><BR>Tnk you very much!<BR>Alessandro</P>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>