10x4 the tip...I looked at the pcap/libpcap source and it does look better than what my app is doing...and since I do it at user level I get obviously lower performance i'll use it from now on... 10x for the guidelines...sure needed them...
----- Original Message ----- From: "Gianluca Varenni" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 27, 2002 7:34 PM Subject: Re: [WinPcap-users] Truncated packets > > ----- Original Message ----- > From: Denis Bujoreanu > To: [EMAIL PROTECTED] > Sent: Tuesday, August 27, 2002 5:19 PM > Subject: [WinPcap-users] Truncated packets > > > >When using packet.dll and packet.sys I get the following behaviour: > > > >When downloading a large HTML file (for example) with the NIC in > promiscuous and filtering ony TCP traffic having port 80 in source or > >destination I don't get the entire transmission but only parts of it > (around 10%)> > > > >Could this be becasue my app takes too much time to process the packet and > looses desyncs or is a limitation of the >packet.dll/packet.sys > > > The problem is that your app takes too much time to process packets. > As advised in another reply to your message, why don't you use the pcap API? > Packet API is quite low level. For example, did you set the kernel buffer to > a proper dimension? The pcap API does it for you. > > How did you filter the web traffic? By filtering packets at user level? This > is a bottleneck. If you use the pcap API you can tell the kernel driver to > bring only web traffic at user level. > > Last suggestion: please read the new documentation shipped with WinPcap 3.0 > alpha developer's pack. > > GV > > > > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[email protected]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED]?body=unsubscribe > ================================================================== ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED]?body=unsubscribe ==================================================================
