<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:st1 =
"urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16809" name=GENERATOR><o:SmartTagType
name="chmetcnv"
namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><!--[if !mso]>
<STYLE>st1\:* {
BEHAVIOR: url(#default#ieooui)
}
</STYLE>
<![endif]-->
<STYLE>
<!--
/* Font Definitions */
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
font-size:10.5pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
/* Page Definitions */
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;
layout-grid:15.6pt;}
div.Section1
{page:Section1;}
-->
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=ZH-CN style="TEXT-JUSTIFY-TRIM: punctuation" vLink=purple link=blue
bgColor=#ffffff>
<DIV><FONT size=2>The upper limit depends on a number of factors. In any case
the maximum amount of memory available in kernel mode is in the order of 200MB
for a 32bit version of Windows, and 128GB on a 64bit one.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Why do you want to increase the kernel buffer size? As Guy
Harris already pointed out on Wireshark-users, increasing the buffer size is a
temporary solution: if you are losing packets because your application is too
slow (or your disk is too slow), you will keep losing packets.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Have a nice day</FONT></DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=jli@altobeam.com href="mailto:jli@altobeam.com">jli</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, March 22, 2009 7:54
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] What's the upper
limit of buffer size?</DIV>
<DIV><BR></DIV>
<DIV class=Section1 style="LAYOUT-GRID: 15.6pt none">
<P class=MsoNormal><FONT face=Arial size=1><SPAN lang=EN-US
style="FONT-SIZE: 9pt; FONT-FAMILY: Arial">Hi
guys:<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=1><SPAN lang=EN-US
style="FONT-SIZE: 9pt; FONT-FAMILY: Arial"> I
use winpcap to capture data at 640Mhz and found data drop, when I set kernel
buffer to 128MB , winpcap told me that there was no sufficient space, and I
just can set it to<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=1><SPAN lang=EN-US
style="FONT-SIZE: 9pt; FONT-FAMILY: Arial">127MB. Can I get larger
kernel buffer ? my laptop has 2 GB physical memory and <st1:chmetcnv w:st="on"
UnitName="g" SourceValue="1" HasSpace="False" Negative="False" NumberType="1"
TCSC="0">1G</st1:chmetcnv> available.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial size=1><SPAN lang=EN-US
style="FONT-SIZE: 9pt; FONT-FAMILY: Arial">
<o:p></o:p></SPAN></FONT></P></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>