[Winpcap-users] Re: reducing dropped packets

[David Chang]

When you say 'the buffer size needs to specified at open time.'  When is the 
open time ? (i.e.  pcap_open_live)  Is it easy to change the libpcap source 
to increase the buffer?

DC

----- Original Message ----- 
From: "Guy Harris" <guy at alum.mit.edu>
To: <winpcap-users at winpcap.org>
Sent: Wednesday, October 18, 2006 11:16 AM
Subject: Re: [Winpcap-users] Re: reducing dropped packets


> David Chang wrote:
>
>> Does libpcap allow pcap_setbuff() now?
>
> No.  Unfortunately, it can't be made to work with BPF; the buffer size 
> needs to be specified at open time.  It'll probably show up in a future 
> open API.
>
>> Also, how can I minimize the amount of effort it takes the hardware to 
>> receive a packet (better NIC, faster CPU, etc), pass it up to the kernel 
>> (O.S. kernel settings), winpcap to filter the packet (winpcap filter 
>> expression and other API settings), and my application to receive that 
>> packet (use pcap_next instead of pcap_dispatch, etc)?
>
> pcap_next() vs. pcap_dispatch() won't make a difference there.
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>