[Winpcap-users] Re: how to get libpcap to use a larger socket buffer

[Loris Degioanni]

WinPcap doesn't have any socket related to the capture instance. Having 
the packet capture stack exported as a socket is a linux convention. 
WinPcap, like most OSes, uses a BPF style capture architecture.

Use pcap_setbuff()

http://www.winpcap.org/docs/docs40b2/html/group__wpcapfunc.html#ga48

to change the size of the kernel capture buffer.

Loris


David Chang wrote:
> Hi,
>  
> I have an application that uses libpcap to capture network traffic.  
> When the traffic volume is light, it works fine.  When the traffic gets 
> heavier, libpcap indicates I'm dropping packets.  Is there a way to use 
> setsockopt() to increase SO_RCVBUF on the pcap_t handle opened by 
> pcap_open_live()?  To say it another way, how can I get libpcap to use a 
> larger receive socket buffer if I'm able to increase that parameter in 
> the Operating System?
>  
> DC
>  
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users