[Winpcap-users] Re: Winpcap-users Digest, Vol 26, Issue 4

[Gianluca Varenni]

  ----- Original Message ----- 
  From: Hardik Shah 
  To: winpcap-users at winpcap.org 
  Sent: Tuesday, May 08, 2007 12:19 AM
  Subject: [Winpcap-users] Re: Winpcap-users Digest, Vol 26, Issue 4


  John,

  filtering at that level will affect the performance of overall system.better thing is to let pcap capture all the data and then run the filtering on another 

Uhm, what do you mean by "will affect the performance of the overall system"? The filter code is usually lightweight enough not to be the bottleneck even in case of long filters. if you bring all the packets to user level the bottleneck (affecting the performance of the overall system) can be the application itself and all the system calls you need to do to move the packets to user level.

Have a nice day
GV

  module.because more the flters you have more tedious it will become.


  --------------------------------

  Hardik Shah
  mobile:- 9827634991
  phone:- +91-0731-2570516 



  ----- Original Message ----
  From: "winpcap-users-request at winpcap.org" <winpcap-users-request at winpcap.org>
  To: winpcap-users at winpcap.org
  Sent: Saturday, 5 May, 2007 5:30:57 PM
  Subject: Winpcap-users Digest, Vol 26, Issue 4


  Send Winpcap-users mailing list submissions to
      winpcap-users at winpcap.org

  To subscribe or unsubscribe via the World Wide Web, visit
      https://www.winpcap.org/mailman/listinfo/winpcap-users
  or, via email, send a message with subject or body 'help' to
      winpcap-users-request at winpcap.org

  You can reach the person managing the list at
      winpcap-users-owner at winpcap.org

  When replying, please edit your Subject line so it is more specific
  than "Re: Contents of Winpcap-users digest..."


  Today's Topics:

     1. Changing WinPCAP Filters on the Fly (John Hermanski)


  ----------------------------------------------------------------------

  Message: 1
  Date: Fri, 4 May 2007 11:43:21 -0400
  From: "John Hermanski" <john.hermanski at eicon.com>
  Subject: [Winpcap-users] Changing WinPCAP Filters on the Fly
  To: <winpcap-users at winpcap.org>
  Message-ID:
      <E096369D937D3A4DB271B382850C5C5F019D40EE at pysmail.eicon.com>
  Content-Type: text/plain; charset="us-ascii"

  Hi, 
  I'm looking into using WinPCAP for capturing and recording audio RTP
  streams. A single session, using a precompiled filter works just fine.
  But in a "real" system, running multiple sessions, packets being
  captured would change on a regular basis. A stream can be uniquely
  identified by its source and destination UDP ports and IP addresses. To
  capture streams for 25 calls, you would need to 'or' together 25
  expressions.
  Would compiling an expression or putting it into use break down when the
  expression got too large? 
  When changing compiled expressions while capture is going, can packets
  be lost? 
  Capturing everything, and then doing filtering myself is an option, but
  probably not a good one. 
  Thanks for any help or opinions here.

  JOHN HERMANSKI
  Applications Engineer

  Dialogic Research Inc.

  Tel: (978) 744-9098
  Mobile: (978) 836-8028
  Email: john.hermanski at dialogic.com
  <mailto:tom.seidenstricker at dialogic.com> 
  Web: www.dialogic.com

  This e-mail is intended only for the named recipient(s) and may contain
  information that is privileged, confidential and/or exempt from
  disclosure under applicable law. No waiver of privilege, confidence or
  otherwise is intended by virtue of communication via the internet. Any
  unauthorized use, dissemination or copying is strictly prohibited. If
  you have received this e-mail in error, or are not named as a recipient,
  please immediately notify the sender and destroy all copies of this
  e-mail.


  -------------- next part --------------
  An HTML attachment was scrubbed...
  URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20070504/ec35ac66/attachment.html

  ------------------------------

  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users


  End of Winpcap-users Digest, Vol 26, Issue 4
  ********************************************





------------------------------------------------------------------------------
  Here¢s a new way to find what you're looking for - Yahoo! Answers 


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20070511/5fc6244f/attachment-0001.htm