[Winpcap-users] winpcap performance

Charu Agrawal cagrawal at altasens.com
Wed Jan 21 17:08:14 GMT 2009



I am sending 30MB frame in nearly 22000 packets.


Yes. All frames are IP frames.

I am trying to increase the efficiency of the system to like 2 frames
per second. 

Is there any way to do that ?




From: winpcap-users-bounces at winpcap.org
[mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: Tuesday, January 20, 2009 5:24 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] winpcap performance



	----- Original Message ----- 

	From: Charu Agrawal <mailto:cagrawal at altasens.com>  

	To: winpcap-users at winpcap.org 

	Sent: Wednesday, January 14, 2009 5:40 PM

	Subject: [Winpcap-users] winpcap performance




	I am trying to get the best performance out of winpcap library.


	We are capturing huge frames(each frame is 30 MB) over the
Ethernet interface using winpcap library.


What do you mean by "30MB frame"?? A frame over Ethernet has a maximum
size of roughly 1500 bytes. Do you mean "conversation"?


	I need to apply filtering to capture only relevant frames. I use
the following filter.


	"src  192.168.x.x"


	I am using a 1Gig dedicated Ethernet interface for the packet
capture. 1 frame comprises of nearly 22,330 packets ( for the 30MB


	I am able to capture 1 frame in nearly 20s. If I remove the
filtering time improves to 5s. 


What do you mean by that? Are all the frames IP frames? what's the L4




	But I need to use the filtering to get only specific packets.

	Is there an alternate way to do this ? is there some way I can
improve the performance ?


	I greatly appreciate your help



	Charu Agrawal


	Winpcap-users mailing list
	Winpcap-users at winpcap.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090121/399ae7c7/attachment.htm

More information about the Winpcap-users mailing list