<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Are you doing TCP or UDP? UDP would be bad for this.<br>
What size packets are you generating? Smaller packets have a lot more overhead.<br>
Are you sure your data generator is actually sending all packets?<br>
What kind of network card do you have?<br>
What kind of machine do you have (CPU/Mhz)?<br>
What kind of switch are you on?<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<p>Michael D. Black<br>
Senior Scientist<br>
Analytics, Production and Services<br>
Advanced GEOINT Systems<br>
Northrop Grumman Information Systems<br>
</p>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF34928"><font color="#000000" face="Tahoma" size="2"><b>From:</b> winpcap-users-bounces@winpcap.org [winpcap-users-bounces@winpcap.org] on behalf of Александр [sitesv@yandex.ru]<br>
<b>Sent:</b> Thursday, June 27, 2013 9:09 AM<br>
<b>To:</b> winpcap-users@winpcap.org<br>
<b>Subject:</b> EXT :Re: [Winpcap-users] winpcap capture speed<br>
</font><br>
</div>
<div></div>
<div>
<div>Today, i tested a speed of winpcap capturing by changing network card window size and transmitt speed. </div>
<div>~120 mbit/s = 0 errors (4M window size)</div>
<div>~180 mbit/s = (1-5 errors on 2000000 packets) (32M window size)....</div>
<div>So... WinPcap isn't suitable for high speed capturing.</div>
<div> </div>
<div>-- </div>
<div>Alex</div>
<div> </div>
<div> </div>
<div>26.06.2013, 20:55, "Black, Michael (IS)" <Michael.Black2@ngc.com>:</div>
<blockquote type="cite">
<p>You need to multi-thread your code.<br>
<br>
Not that it is guaranteed but you need to get the packets out of the queue as fast as possible and put them in your own queue.<br>
<br>
Of course, you can then end up with an ever-growing queue if your code can't keep up.<br>
<br>
If all you do is count packets and NOTHING else does it behave?<br>
<br>
What kind of network card do you have?<br>
<br>
Michael D. Black<br>
Senior Scientist<br>
Analytics, Production and Services<br>
Advanced GEOINT Systems<br>
Northrop Grumman Information Systems<br>
<br>
________________________________________<br>
From: <a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a> [<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] on behalf of A.L. Kuramshin [<a href="mailto:alimjankuramshin@gmail.com" target="_blank">alimjankuramshin@gmail.com</a>]<br>
Sent: Wednesday, June 26, 2013 11:48 AM<br>
To: <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
Subject: EXT :Re: [Winpcap-users] winpcap capture speed<br>
<br>
As for me, it would not help. Packets loss will be delayed a bit, that's it. It will begin for example after 1 million packets or 2 or so, a bit later. Just thoughts.. :)<br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>