[Winpcap-users] can I change a filter during capture with WinPCapwithout losing packets?

Gianluca Varenni gianluca.varenni at cacetech.com
Thu Aug 19 10:55:35 PDT 2010



--------------------------------------------------
From: "Greg Hauptmann" <greg.hauptmann.ruby at gmail.com>
Sent: Tuesday, August 17, 2010 6:53 PM
To: <winpcap-users at winpcap.org>
Subject: [Winpcap-users] can I change a filter during capture with 
WinPCapwithout losing packets?

> Hi,
>
> Can I change a filter during capture with WinPCap without losing
> packets?  Does WinPCap support this?

No. When you change the filter, all the packets stored in the kernel buffer 
at that specific time are dropped.

Have a nice day
GV

>
> thanks
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 



More information about the Winpcap-users mailing list