[Winpcap-users] MODE_STAT

[Gianluca Varenni]

The timestamp is generated when the stat reports are computed in the driver.

While in the callback function, the packets are buffered by the kernel buffer managed by the WinPcap kernel driver, npf.sys. In particular, if you are in statistical mode, packets are not actually buffered at all, the driver receives the packets from the OS, updates the statistics and releases the packet. This update is completely independent from the callback function.

Have a nice day
GV

  ----- Original Message ----- 
  From: Fitt, Jonathan 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, December 06, 2007 2:11 PM
  Subject: [Winpcap-users] MODE_STAT


  My question is about using pcap in statistical mode.

  The timeval attached to the stat report header, when exactly is that time?
  Is it the time the capture started, or timed out?

  Also, while in the callback function are all packets received/sent buffered up so that they'll appear in the next report?
  I don't want to miss any while in the callback function.

  Thanks,

  Jonathan


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20071207/234ab5c7/attachment.htm