[Winpcap-users] Performance issues and c# wrappers

Black, Michael (IS) Michael.Black2 at ngc.com
Wed Jul 13 06:48:15 PDT 2011


Like I said...you won't know unless you test it in your situation.



Generally speaking.

#1 Any added layer slows things down.  But it may not have much of an effect it that's only a small part of the processing.

#2 I would suspect packet loss to NOT occur until CPU usage hits 100%.  But I wouldn't trust that statement without testing it.



So...to emphasize...YOU DON"T KNOW UNTIL YOU TEST IT YOURSELF IN YOUR SPECIFIC SETUP.

On the other hand, even with testing, you can't make the statement that you can guaratee capturing 100% of the traffic as you have no way of proving that.  You can state such with "high confidence" after you test, like this "testing shows CPU usage at X% and no packet loss has been seen from our testing".



I take it you're plugged into a hub and not a switch or into a monitoring port set up on a switch?  Otherwise you won't see anything but your own traffic.





Michael D. Black

Senior Scientist

NG Information Systems

Advanced Analytics Directorate



________________________________
From: winpcap-users-bounces at winpcap.org [winpcap-users-bounces at winpcap.org] on behalf of Emre Erişgen [emreerisgen at gmail.com]
Sent: Wednesday, July 13, 2011 8:24 AM
To: winpcap-users at winpcap.org
Subject: EXT :Re: [Winpcap-users] Performance issues and c# wrappers

Ty so much for your answers. So there wont be any packet loss unless cpu usage is under %100 and using a wrapper will not affect the performance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20110713/a7820e5b/attachment.html>


More information about the Winpcap-users mailing list