<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:verdana,helvetica,sans-serif;font-size:8pt">John,<br><br>filtering at that level will affect the performance of overall system.better thing is to let pcap capture all the data and then run the filtering on another module.because more the flters you have more tedious it will become.<br><div> </div>--------------------------------<br> <div>Hardik Shah<br> <font size="3">mobile:- 9827634991</font><br> phone:- +91-0731-2570516 </div><div style="font-family: verdana,helvetica,sans-serif; font-size: 8pt;"><br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: "winpcap-users-request@winpcap.org" <winpcap-users-request@winpcap.org><br>To: winpcap-users@winpcap.org<br>Sent: Saturday, 5 May, 2007 5:30:57 PM<br>Subject: Winpcap-users Digest, Vol 26, Issue 4<br><br><div>Send Winpcap-users mailing
list submissions to<br> winpcap-users@winpcap.org<br><br>To subscribe or unsubscribe via the World Wide Web, visit<br> <a target="_blank" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>or, via email, send a message with subject or body 'help' to<br> winpcap-users-request@winpcap.org<br><br>You can reach the person managing the list at<br> winpcap-users-owner@winpcap.org<br><br>When replying, please edit your Subject line so it is more specific<br>than "Re: Contents of Winpcap-users digest..."<br><br><br>Today's Topics:<br><br> 1. Changing WinPCAP Filters on the Fly (John Hermanski)<br><br><br>----------------------------------------------------------------------<br><br>Message: 1<br>Date: Fri, 4 May 2007 11:43:21 -0400<br>From: "John Hermanski" <john.hermanski@eicon.com><br>Subject:
[Winpcap-users] Changing WinPCAP Filters on the Fly<br>To: <winpcap-users@winpcap.org><br>Message-ID:<br> <E096369D937D3A4DB271B382850C5C5F019D40EE@pysmail.eicon.com><br>Content-Type: text/plain; charset="us-ascii"<br><br>Hi, <br>I'm looking into using WinPCAP for capturing and recording audio RTP<br>streams. A single session, using a precompiled filter works just fine.<br>But in a "real" system, running multiple sessions, packets being<br>captured would change on a regular basis. A stream can be uniquely<br>identified by its source and destination UDP ports and IP addresses. To<br>capture streams for 25 calls, you would need to 'or' together 25<br>expressions.<br>Would compiling an expression or putting it into use break down when the<br>expression got too large? <br>When changing compiled expressions while capture is going, can packets<br>be lost? <br>Capturing everything, and then doing filtering myself is an option, but<br>probably
not a good one. <br>Thanks for any help or opinions here.<br><br>JOHN HERMANSKI<br>Applications Engineer<br><br>Dialogic Research Inc.<br><br>Tel: (978) 744-9098<br>Mobile: (978) 836-8028<br>Email: john.hermanski@dialogic.com<br><mailto:tom.seidenstricker@dialogic.com> <br>Web: <a target="_blank" href="http://www.dialogic.com">www.dialogic.com</a><br><br>This e-mail is intended only for the named recipient(s) and may contain<br>information that is privileged, confidential and/or exempt from<br>disclosure under applicable law. No waiver of privilege, confidence or<br>otherwise is intended by virtue of communication via the internet. Any<br>unauthorized use, dissemination or copying is strictly prohibited. If<br>you have received this e-mail in error, or are not named as a recipient,<br>please immediately notify the sender and destroy all copies of this<br>e-mail.<br><br><br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <a
target="_blank" href="http://www.winpcap.org/pipermail/winpcap-users/attachments/20070504/ec35ac66/attachment.html">http://www.winpcap.org/pipermail/winpcap-users/attachments/20070504/ec35ac66/attachment.html</a><br><br>------------------------------<br><br>_______________________________________________<br>Winpcap-users mailing list<br>Winpcap-users@winpcap.org<br><a target="_blank" href="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br><br><br>End of Winpcap-users Digest, Vol 26, Issue 4<br>********************************************<br></div></div><br></div></div><br>
<hr size=1></hr>
Here¢s a new way to find what you're looking for - <a href="http://us.rd.yahoo.com/mail/in/yanswers/*http://in.answers.yahoo.com/">Yahoo! Answers</a> </body></html>