No subject


Tue Mar 10 07:36:09 PDT 2009


When a new dimension is set, the data in the old buffer is discarded and the packets stored in it are lost.
Note: the dimension of the kernel buffer affects heavily the performances of the capture process. An adequate
buffer in the driver is able to keep the packets while the application is busy, compensating the delays of the
application and avoiding the loss of packets during bursts or high network activity. The buffer size is set to 0
when an instance of the driver is opened: the programmer should remember to set it to a proper value.
As an example, wpcap sets the buffer size to 1MB at the beginning of a capture.

--gv




More information about the Winpcap-users mailing list