<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">OK..you realize that UDP is frequently called "Unreliable Data Protocol".<br>
<br>
You will get collisions on the network and the packets will get lost unless you implement your own ack/nak method. The faster you send the more likely it is.<br>
<br>
Lot's of D-Link gigabit switches...many of which are hardly high-speed devices so it could cause some problems too.<br>
<br>
I would first test a network crossover cable and see if the D-Link is your problem.<br>
<br>
Better yet is to use TCP but you really need a capture port on the switch do a fair comparison.<br>
<br>
<br>
I tested IPerf on my home network (I work from home).<br>
<a href="http://www.softpedia.com/progDownload/Iperf-Download-78352.html" target="_blank">http://www.softpedia.com/progDownload/Iperf-Download-78352.html</a><br>
<br>
<br>
Server:<br>
iperf -s -u <br>
<div>Client:<br>
iperf -c server -l 9000 -u 100M<br>
<br>
I lost one packet at 100Mbit<br>
At 150Mbit I lost 4 packets.<br>
<br>
I'm running through an ASUS wireless router.<br>
<br>
If I run in tcp mode I get 558Mbits/sec<br>
<br>
You just can't push UDP very fast without losing packets. Collision probability is directly related to bandwidth utilization.<br>
<br>
<br>
<br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<p>Michael D. Black<br>
Senior Scientist<br>
Analytics, Production and Services<br>
Advanced GEOINT Systems<br>
Northrop Grumman Information Systems<br>
</p>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF871636"><font color="#000000" face="Tahoma" size="2"><b>From:</b> winpcap-users-bounces@winpcap.org [winpcap-users-bounces@winpcap.org] on behalf of Александр [sitesv@yandex.ru]<br>
<b>Sent:</b> Thursday, June 27, 2013 9:33 AM<br>
<b>To:</b> winpcap-users@winpcap.org<br>
<b>Subject:</b> EXT :Re: [Winpcap-users] winpcap capture speed<br>
</font><br>
</div>
<div></div>
<div>
<div>1. I capturing UDP packets.</div>
<div>2. Size = JumboFrame 9k.</div>
<div>3. Yes, i'm sure.</div>
<div>4. Realtek GbE (motherboard onboard)</div>
<div>5. PC, Core i7, about 3GHz.</div>
<div>6. Switch: D-Link Gigabit Switch.</div>
<div> </div>
<div>-- Alex<span style="font-size:13px"> </span></div>
<div> </div>
<div>27.06.2013, 18:27, "Black, Michael (IS)" <Michael.Black2@ngc.com>:</div>
<blockquote type="cite">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">Are you doing TCP or UDP? UDP would be bad for this.<br>
What size packets are you generating? Smaller packets have a lot more overhead.<br>
Are you sure your data generator is actually sending all packets?<br>
What kind of network card do you have?<br>
What kind of machine do you have (CPU/Mhz)?<br>
What kind of switch are you on?<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<p>Michael D. Black<br>
Senior Scientist<br>
Analytics, Production and Services<br>
Advanced GEOINT Systems<br>
Northrop Grumman Information Systems</p>
</div>
</div>
</div>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr>
<div style="direction:ltr"><font color="#000000" face="Tahoma" size="2"><strong>From:</strong>
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a> [<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] on behalf of Александр [<a href="mailto:sitesv@yandex.ru" target="_blank">sitesv@yandex.ru</a>]<br>
<strong>Sent:</strong> Thursday, June 27, 2013 9:09 AM<br>
<strong>To:</strong> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<strong>Subject:</strong> EXT :Re: [Winpcap-users] winpcap capture speed<br>
</font></div>
<div> </div>
<div>
<div>Today, i tested a speed of winpcap capturing by changing network card window size and transmitt speed. </div>
<div>~120 mbit/s = 0 errors (4M window size)</div>
<div>~180 mbit/s = (1-5 errors on <span>2000000</span> packets) (32M window size)....</div>
<div>So... WinPcap isn't suitable for high speed capturing.</div>
<div> </div>
<div>-- </div>
<div>Alex</div>
<div> </div>
<div> </div>
<div>26.06.2013, 20:55, "Black, Michael (IS)" <<a href="mailto:Michael.Black2@ngc.com" target="_blank">Michael.Black2@ngc.com</a>>:</div>
<blockquote type="cite">
<p>You need to multi-thread your code.<br>
<br>
Not that it is guaranteed but you need to get the packets out of the queue as fast as possible and put them in your own queue.<br>
<br>
Of course, you can then end up with an ever-growing queue if your code can't keep up.<br>
<br>
If all you do is count packets and NOTHING else does it behave?<br>
<br>
What kind of network card do you have?<br>
<br>
Michael D. Black<br>
Senior Scientist<br>
Analytics, Production and Services<br>
Advanced GEOINT Systems<br>
Northrop Grumman Information Systems<br>
<br>
________________________________________<br>
From: <a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a> [<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] on behalf of A.L. Kuramshin [<a href="mailto:alimjankuramshin@gmail.com" target="_blank">alimjankuramshin@gmail.com</a>]<br>
Sent: Wednesday, June 26, 2013 11:48 AM<br>
To: <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
Subject: EXT :Re: [Winpcap-users] winpcap capture speed<br>
<br>
As for me, it would not help. Packets loss will be delayed a bit, that's it. It will begin for example after 1 million packets or 2 or so, a bit later. Just thoughts.. :)<br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></p>
</blockquote>
</div>
</div>
</div>
,
<p>_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>