gianluca.varenni at cacetech.com
Mon May 29 15:18:06 GMT 2006
----- Original Message -----
From: "Tecnowatt - Massimo Sala" <massimo.sala at tecnowatt.com>
To: <winpcap-users at winpcap.org>
Sent: Monday, May 29, 2006 5:53 AM
Subject: [Winpcap-users] pcap_live_dump
> In the past documentation (from winpcap 3.0) it was outlined the
> importance of dumping the packet to disk in kernel mode, without have to
> switch from kernel to user and viceversa for every packet dumped.
> In the 3.0 and 3.1 versions pcap_live_dump isn't working.
> What about Winpcap 4 and pcap_live_dump ?
At the moment the kernel dump feature is still disabled: after the release
of WinPcap 3.0, we worked on a complete rewriting of the code managing the
kernel buffer, and due to lack of resources, we never ported the kernel dump
feature on top of this new kernel buffer code (thus forcing us to disable
the feature). Having the kernel dump feature working again is definitely in
our plans, but unfortunately we don't have a schedule on when we will work
Have a nice day
> ciao, Massimo
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
More information about the Winpcap-users