Hi,
>
> hi all,
>
>
> QUESTION 1
> do you have any plans to release a multiprocessor version of the
> winpcap/libpcap library?
Not in the short period. I am speaking on behalf of the WinPcap team at the
Politecnico di Torino, that is quite busy on other tasks at the moment.
Obviously, any (good) patch for SMP will be well accepted and added to the
code.
>
> QUESTION 2
> this is pretty long, I hope somebody has enough patience to read it.
> I'm using libpcap(win32 version) to dump some network traffic.
>
> I start the capture like below:
> "
> m_pfp = pcap_open_live(m_szDevice, 1514, 1, 20, m_szErr) );
> //obtain the subnet
> pcap_lookupnet(m_szDevice, &m_SubNet, &m_NetMask, m_szErr);
> //compile the filter
> pcap_compile(m_pfp, &m_fcode, m_szFilter, 1, m_NetMask) <0 );
> //set the filter
> pcap_setfilter(m_pfp, &m_fcode) < 0 );
> pcap_loop(m_pfp, 0, My_Sniffer::dispatcher_handler, NULL);
> "
>
> stop the capture:
> "
> if (m_pfp){
> pcap_close(m_pfp);
> m_pfp = NULL;
> }
> //!!!PROBLEM LINE!!!
> m_dumpfile.close();//(m_dumpfile is an ofstream buffer)
> "
>
> the My_Sniffer::dispatcher_handler() callback does some processing on
> packages and then dumps content in the m_dumfile buffer.
>
> AND THE PROBLEM IS :
> after the "m_dumpfile.close()" line, I get an "Access violation error"
> which leads to a line like "dumpfile << "bla, bla"; " in my
> dispatcher_handler callback function.
I think that the problem is that you call pcap_close() asynchronously (I
suppose from a different thread), because pcap_loop() with cnt=0 never
returns. This can cause consistency problems inside wpcap.dll.
Try instead using pcap_dispatch(), that returns at periodic intervals, and
calling pcap_close() in the same
thread.
Loris.
> first thought was : the current dispatcher_handler() call did not
> finished.
> so i tried to wait in the closing procedure.
> new code looks like:
> "
> dispatcher_handler(...)
> {
> ResetEvent(m_hEvent);
> ...processing...
> SetEvent(m_hEvent);
> }
>
> and the closing procedure is :
> "
> pcap_close();
> WaitForSingleEvent(m_hEvent);
> dumpfile.close();
> "
>
> but i still get the same error, which means the dispatcher_handler is
> called at least once AFTER pcap_close().
> IS THIS TRUE? or is something wrong with my code?
>
> If true, the only solutions I can think of are:
> 1. rewrite the pcap_close() function so it does not return until the
> capture buffer is emptied.
> 2. signal an event when capture buffer is emptied.
>
> Can you do this? or at least give me some hints where to do such
> changes?( pcap_read() or pcap_loop() functions seem a good place for
> solution 2)
>
> Many thanks in advance!
>
> Paul
>
>
>
>
>
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Tax Center - online filing with TurboTax
> http://taxes.yahoo.com/
