[Winpcap-users] acquisition position

[Michel NoSpam]

I am using Wireshark on Windows XP professionnal SP2

--- En date de : Mar 3.11.09, Gianluca Varenni <gianluca.varenni at cacetech.com> a écrit :


De: Gianluca Varenni <gianluca.varenni at cacetech.com>
Objet: Re: [Winpcap-users] acquisition position
À: winpcap-users at winpcap.org
Date: Mardi 3 Novembre 2009, 16h35





What is the name and description of the adapter you are capturing from? Which operating system?
 
Have a nice day
GV

----- Original Message ----- 
From: Michel NoSpam 
To: winpcap-users at winpcap.org 
Sent: Tuesday, November 03, 2009 12:59 AM
Subject: [Winpcap-users] acquisition position






Hello, 

 
I would to know a which level Wireshark/Winpcap samples the IP packets.
I use a mobile phone as a modem (DUN). A flow control permits to adjust the data flow from the PC to the modem.

We have a downlink and a uplink data flow.
Because of this flow control, we can see that the downlink TCP data are not acknowledge immediately.

I would like to know where wireshark samples the data?
When the data leave the ipstack or when the data leave the PC?
Can I configure wireshark/winpcap to sample the packet a layer 3?
(I am affraid it could have some important delay between layer3 -> layer 2 -> layer 1)

(stack ip -> PPP -> USB -> modem) 


Thanks a lot. 
Michel




_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users

-----La pièce jointe associée suit-----


_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20091103/5bdfe7bd/attachment.htm