[Winpcap-users] detecting dropped packets

[Chad Hansen]

I've searched the FAQ, docs, and mailing list, but couldn't quite find an
answer.

 

I'm writing a speed-sensitive application that needs to process large
volumes of packets live. I'd like to know if the app is keeping up with
traffic, which means I need to know if wpcap's kernel (or user?) buffer is
ever overflowing and dropping packets (caused, of course, by my app not
emptying the buffer fast enough). Is there a way to tell if I'm reading
wpcap's buffer too slowly?

 

On a related note, if I dump packets to a file and then capture from the
file, is there any timing information associated with that? Ie, can I read
from the file at the same speed/timing distribution that the packets were
captured at? If so, I'll simply save some traffic to a file and then when my
app is done, compare the amount of packets in the file to the amount my app
read to see if any were dropped.

 

Thanks!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080514/8f88a219/attachment.htm