[Winpcap-users] Re: how to get libpcap to use a larger socket buffer

Loris Degioanni loris.degioanni at cacetech.com
Sat Nov 18 17:17:51 GMT 2006

WinPcap doesn't have any socket related to the capture instance. Having 
the packet capture stack exported as a socket is a linux convention. 
WinPcap, like most OSes, uses a BPF style capture architecture.

Use pcap_setbuff()


to change the size of the kernel capture buffer.


David Chang wrote:
> Hi,
> I have an application that uses libpcap to capture network traffic.  
> When the traffic volume is light, it works fine.  When the traffic gets 
> heavier, libpcap indicates I'm dropping packets.  Is there a way to use 
> setsockopt() to increase SO_RCVBUF on the pcap_t handle opened by 
> pcap_open_live()?  To say it another way, how can I get libpcap to use a 
> larger receive socket buffer if I'm able to increase that parameter in 
> the Operating System?
> DC
> ------------------------------------------------------------------------
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users

More information about the Winpcap-users mailing list