Hi. I cannot tell you that WinPcap will sure capture all the packets: WinPcap receives all the packets, but it can drop them if the kernel buffer is full. This buffer is emptied by the user level applications, so if the winpcap-based application is not fast enough to process packets, it could happen that some packets are dropped.
It all depends on: -the link speed -the type of NIC (someones are faster than other) -the CPU speed -the kernel buffer size -the application that seats on top of winpcap -the part of the packet that is brought to user level (all the packet? the first 96 bytes?) ..... Now the questions are: -why do you need ALL the packets? -what do you do with the packets? If you need more details on the WinPcap architecture, you can find details at http://winpcap.polito.it/docs/th_degio.zip This is the graduation thesis of Loris Degioanni, the author of WinPcap. The first chapter is in italian, while the rest is in english. GV ----- Original Message ----- From: "Selcuk Cevher" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, April 26, 2002 10:14 AM Subject: [WinPcap-users] winpcap performance > > hi all.. > i am planning to use winpcap under Windows 2000 platform to capture "ALL" > the packets passing through the ethernet adapter card.I do not want any > packets to lose without capturing.So i wonder whether winpcap is capable of > capturing ALL the packets or not.I know this also depends on the processor > speed.But i want to learn about the winpcap performance itself...thank you.. > > _________________________________________________________________ > MSN Photos is the easiest way to share and print your photos: > http://photos.msn.com/support/worldwide.aspx > >
