<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=text/html;charset=gb2312 http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16588"></HEAD>
<BODY style="PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: 15px"
id=MailContainerBody leftMargin=0 topMargin=0 CanvasTabStop="true"
name="Compose message area">
<DIV><FONT face=Calibri>No.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Please consider that receiving one packet at a time with
pcap_next_ex is not a bottleneck at those rates.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day</FONT></DIV>
<DIV><FONT face=Calibri>GV</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=lyulou@gmail.com
href="mailto:lyulou@gmail.com">yulou liu</A> </DIV>
<DIV><B>Sent:</B> Wednesday, August 11, 2010 9:17 AM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV><B>Subject:</B> Re: [Winpcap-users] does the winpcap version
4.1.2supportthekernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV>Hi!</DIV>
<DIV> </DIV>
<DIV>I have a question, pcap_next_ex() can only get one ethernet packet at
a call. Is there other way that I can read more than one packet from
the user buffer (or kernel buffer) at one call ? I think maybe that would
decrease the packet loss.</DIV>
<DIV> </DIV>
<DIV>Thank you.</DIV>
<DIV> </DIV>
<DIV><BR><BR> </DIV>
<DIV class=gmail_quote>2010/8/7 yulou liu <SPAN dir=ltr><<A
href="mailto:lyulou@gmail.com">lyulou@gmail.com</A>></SPAN><BR>
<BLOCKQUOTE
style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex"
class=gmail_quote>
<DIV bgcolor="#FFFFFF">
<DIV>1. Maybe I didn't make it clear .I don't just want to count , I want to
save the data to disk(ramdisk ) too . At the rate of 614Mbps,
recording data lasts about 2 minutes. But I found it began
to have packets loss sometimes ,even I just count the packets number.</DIV>
<DIV><BR></DIV>
<DIV>2. All the packets from the fpga is 1514, I made the minitocopy as
8 kytes, kernel buffer and user buffer both as 32MB.</DIV>
<DIV><BR></DIV>
<DIV>3. There is still have tcp/ip bound to the netcard , it is recommended to
disable it? I will have a try.</DIV>
<DIV><BR></DIV>
<DIV>Thank you. <SPAN> </SPAN></DIV>
<DIV> <BR><BR>在 2010-8-7，1:45，Gianluca Varenni <<A
href="mailto:gianluca.varenni@cacetech.com"
target=_blank>gianluca.varenni@cacetech.com</A>> 写到：<BR><BR></DIV>
<DIV>
<DIV></DIV>
<DIV class=h5>
<DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><FONT face=Calibri>I'm not 100% sure what the performance problem has
to do with the live_dump feature. At those traffic rates you definitely
don't want to dump all the packets to disk. If you are just interested in
counting the packets, I would use the statistical mode of WinPcap to just
count the packets. Follow the sample Examples-remote\tcptop for
that.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Having said, at those rates there is no guarantee
that WinPcap will be able to keep up (especially if the packets are small).
What is the average packet size that you are analyzing? Did you disable all
the bound protocols from the network card used for the capture?</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day</FONT></DIV>
<DIV><FONT face=Calibri>GV</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV><B>From:</B> <A title=lyulou@gmail.com href="mailto:lyulou@gmail.com"
target=_blank>yulou liu</A> </DIV>
<DIV><B>Sent:</B> Friday, August 06, 2010 10:14 AM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org" target=_blank><A
href="mailto:winpcap-users@winpcap.org"
target=_blank>winpcap-users@winpcap.org</A></A> </DIV>
<DIV><B>Subject:</B> Re: [Winpcap-users] does the winpcap version 4.1.2
supportthekernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<BLOCKQUOTE type="cite"><SPAN style="COLOR: rgb(0,0,0)">
<DIV>yes，i don't want to use an old version either.but there has been a
problem that I can't resolve . I made a capture program to collecte datas
which are sent from an fpga . There are several receive threads in
the program, each of threads accesses a global netcard port in tern. In
order to verify the performace ,it just do the least thing In the receive
thread---it just count the amount of Ethernet frames that it
receive. But when the fpga sending rate increases,especially above
500Mbps, it sometimes loss packets. My question is, is it possible to
totally avoid packets loss by optimism the code? I want to collect
datas on the speed 614Mbps without packet loss. My workstations
features with 2 Xeon CPU (each has 4core), 1 G onboard netcard.
<BR></DIV></SPAN></BLOCKQUOTE>Thanks a lot!<BR>
<BLOCKQUOTE type="cite"><SPAN style="COLOR: rgb(0,0,0)">
<DIV><BR>在 2010-8-6，23:58，Gianluca Varenni <<A
href="mailto:gianluca.varenni@cacetech.com" target=_blank><A
href="mailto:gianluca.varenni@cacetech.com"
target=_blank>gianluca.varenni@cacetech.com</A></A>> 写到：<BR><BR></DIV>
<DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><FONT face=Calibri>I would definitely avoid using an old version of
WinPcap (like 3.0alpha2). A huge number of bugs have been fixed since
that release, including critical bugs in the driver that could cause OS
crashes.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day</FONT></DIV>
<DIV><FONT face=Calibri>GV</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND-COLOR: rgb(245,245,245)">
<DIV><B>From:</B> <A title=lyulou@gmail.com
href="mailto:lyulou@gmail.com" target=_blank>yulou liu</A></DIV>
<DIV><B>Sent:</B> Thursday, August 05, 2010 7:22 PM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org" target=_blank></A><A
title="mailto:winpcap-users@winpcap.org CTRL + Click to follow link"
href="mailto:winpcap-users@winpcap.org" target=_blank><A
href="mailto:winpcap-users@winpcap.org"
target=_blank>winpcap-users@winpcap.org</A></A></DIV>
<DIV><B>Subject:</B> Re: [Winpcap-users] does the winpcap version
4.1.2 support thekernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV><SPAN style="FONT-SIZE: 15px"><BR><FONT size=2
face=宋体> </FONT> <BR><FONT size=2 face=宋体>thanks a
lot. </FONT><BR><FONT size=2 face=宋体> </FONT> <BR><FONT
size=2 face=宋体>I have another question. </FONT><BR><FONT size=2
face=宋体>Is there any possible that I could use the live_dump feature if
I install the older version of winpcap ?</FONT> <BR><FONT size=2
face=宋体> </FONT> <BR><FONT size=2 face=宋体>the following was
what I just tried this morning:</FONT> <BR><FONT size=2
face=宋体> </FONT> <BR><FONT size=2 face=宋体>1. install the
3.0alpha2-WinPcap.exe </FONT><BR><FONT size=2
face=Calibri>2. download the "</FONT><FONT size=2
face=宋体>3.0beta-wpdpack.zip</FONT><FONT size=2 face=Calibri>"
file and unzip , and config VC6 to refer to the lib ,
include's directions .</FONT> <BR><FONT size=2
face=Calibri> </FONT> <BR><FONT size=2 face=Calibri>Compile
the project which uses pcap_live_dump(). It was
successully compiled . </FONT><BR><FONT size=2 face=Calibri>But
when I run the .exe file , it can't find the netcard
interfaces. </FONT><BR><FONT size=2
face=Calibri> </FONT> <BR><FONT size=2
face=Calibri>Please tell me what mistakes did I make
? </FONT><BR><FONT size=2 face=宋体> </FONT> <BR><FONT
size=2 face=Calibri>Thank you. </FONT><BR><FONT size=2
face=sans-serif><BR><BR></FONT></SPAN>在 2010-8-6，0:45，Gianluca Varenni
<<A href="mailto:gianluca.varenni@cacetech.com" target=_blank></A><A
href="mailto:gianluca.varenni@cacetech.com" target=_blank><A
href="mailto:gianluca.varenni@cacetech.com"
target=_blank>gianluca.varenni@cacetech.com</A></A>>
写到：<BR><BR></DIV>
<DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV><FONT face=Calibri>The live_dump feature has been disabled
several years ago (because of other changes in the driver) and no one
has worked to support it again. At the moment in order to dump to disk
you need to use the standard dump-to-disk mechanism shown in sample
"savedump" in the WinPcap developer's pack.</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Have a nice day.</FONT></DIV>
<DIV style="FONT: 10pt Tahoma">
<DIV><BR></DIV>
<DIV style="BACKGROUND-COLOR: rgb(245,245,245)">
<DIV><B>From:</B> <A title=lyulou@gmail.com
href="mailto:lyulou@gmail.com" target=_blank>yulou liu</A></DIV>
<DIV><B>Sent:</B> Thursday, August 05, 2010 9:32 AM</DIV>
<DIV><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org" target=_blank></A><A
href="mailto:winpcap-users@winpcap.org" target=_blank></A><A
href="mailto:winpcap-users@winpcap.org" target=_blank><A
href="mailto:winpcap-users@winpcap.org"
target=_blank>winpcap-users@winpcap.org</A></A></DIV>
<DIV><B>Subject:</B> [Winpcap-users] does the winpcap version
4.1.2 support the kernelDump feature?</DIV></DIV></DIV>
<DIV><BR></DIV>
<DIV>I'm working on a project , that I want to dump packets to the
disk .</DIV>
<DIV>I think the pcap_live_dump() maybe could work in the way I
want.</DIV>
<DIV>but it seems the pcap_live_dump() is not supported in the new
version of winpcap.</DIV>
<DIV>is it true ??</DIV>
<DIV> </DIV>
<DIV>thank you.</DIV>
<P></P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A href="mailto:Winpcap-users@winpcap.org"
target=_blank></A><A href="mailto:Winpcap-users@winpcap.org"
target=_blank></A><A href="mailto:Winpcap-users@winpcap.org"
target=_blank><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A></A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank></A><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank></A><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></A><BR></DIV></BLOCKQUOTE>
<BLOCKQUOTE type="cite">
<DIV><SPAN>_______________________________________________</SPAN><BR><SPAN>Winpcap-users
mailing list</SPAN><BR><SPAN><A
href="mailto:Winpcap-users@winpcap.org" target=_blank></A><A
href="mailto:Winpcap-users@winpcap.org" target=_blank><A
href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A></A></SPAN><BR><SPAN><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank></A><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></A></SPAN><BR></DIV></BLOCKQUOTE>
<P></P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A href="mailto:Winpcap-users@winpcap.org"
target=_blank><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A></A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></A><BR></DIV></BLOCKQUOTE>
<BLOCKQUOTE type="cite">
<DIV><SPAN>_______________________________________________</SPAN><BR><SPAN>Winpcap-users
mailing list</SPAN><BR><SPAN><A href="mailto:Winpcap-users@winpcap.org"
target=_blank><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A></A></SPAN><BR><SPAN><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></A></SPAN></DIV></BLOCKQUOTE></SPAN></BLOCKQUOTE>
<P></P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR></DIV></BLOCKQUOTE>
<BLOCKQUOTE type="cite">
<DIV><SPAN>_______________________________________________</SPAN><BR><SPAN>Winpcap-users
mailing list</SPAN><BR><SPAN><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A></SPAN><BR><SPAN><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A></SPAN><BR></DIV></BLOCKQUOTE></DIV></DIV></DIV></BLOCKQUOTE></DIV><BR>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BODY></HTML>