[Winpcap-users] pcap_live_dump

Gianluca Varenni gianluca.varenni at cacetech.com
Mon May 29 15:18:06 GMT 2006

----- Original Message ----- 
From: "Tecnowatt - Massimo Sala" <massimo.sala at tecnowatt.com>
To: <winpcap-users at winpcap.org>
Sent: Monday, May 29, 2006 5:53 AM
Subject: [Winpcap-users] pcap_live_dump

> In the past documentation (from winpcap 3.0) it was outlined the 
> importance of dumping the packet to disk in kernel mode, without have to 
> switch from kernel to user and viceversa for every packet dumped.
> In the 3.0 and 3.1 versions pcap_live_dump isn't working.
> What about  Winpcap 4 and pcap_live_dump ?

At the moment the kernel dump feature is still disabled: after the release 
of WinPcap 3.0, we worked on a complete rewriting of the code managing the 
kernel buffer, and due to lack of resources, we never ported the kernel dump 
feature on top of this new kernel buffer code (thus forcing us to disable 
the feature). Having the kernel dump feature working again is definitely in 
our plans, but unfortunately we don't have a schedule on when we will work 
on it.

Have a nice day

> ciao, Massimo
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 

More information about the Winpcap-users mailing list