[Winpcap-users] detecting dropped packets

Gianluca Varenni gianluca.varenni at cacetech.com
Wed May 21 00:13:33 GMT 2008


Have you tried using pcap_stats and check the number of dropped packets in the statistics?

Have a nice day
GV
  ----- Original Message ----- 
  From: Chad Hansen 
  To: winpcap-users at winpcap.org 
  Sent: Wednesday, May 14, 2008 10:00 AM
  Subject: [Winpcap-users] detecting dropped packets


  I've searched the FAQ, docs, and mailing list, but couldn't quite find an answer.

   

  I'm writing a speed-sensitive application that needs to process large volumes of packets live. I'd like to know if the app is keeping up with traffic, which means I need to know if wpcap's kernel (or user?) buffer is ever overflowing and dropping packets (caused, of course, by my app not emptying the buffer fast enough). Is there a way to tell if I'm reading wpcap's buffer too slowly?

   

  On a related note, if I dump packets to a file and then capture from the file, is there any timing information associated with that? Ie, can I read from the file at the same speed/timing distribution that the packets were captured at? If so, I'll simply save some traffic to a file and then when my app is done, compare the amount of packets in the file to the amount my app read to see if any were dropped.

   

  Thanks!



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080521/9e06fcb9/attachment.htm


More information about the Winpcap-users mailing list