[Winpcap-users] detecting dropped packets
Gianluca Varenni
gianluca.varenni at cacetech.com
Wed May 21 00:13:33 GMT 2008
Have you tried using pcap_stats and check the number of dropped packets in the statistics?
Have a nice day
GV
----- Original Message -----
From: Chad Hansen
To: winpcap-users at winpcap.org
Sent: Wednesday, May 14, 2008 10:00 AM
Subject: [Winpcap-users] detecting dropped packets
I've searched the FAQ, docs, and mailing list, but couldn't quite find an answer.
I'm writing a speed-sensitive application that needs to process large volumes of packets live. I'd like to know if the app is keeping up with traffic, which means I need to know if wpcap's kernel (or user?) buffer is ever overflowing and dropping packets (caused, of course, by my app not emptying the buffer fast enough). Is there a way to tell if I'm reading wpcap's buffer too slowly?
On a related note, if I dump packets to a file and then capture from the file, is there any timing information associated with that? Ie, can I read from the file at the same speed/timing distribution that the packets were captured at? If so, I'll simply save some traffic to a file and then when my app is done, compare the amount of packets in the file to the amount my app read to see if any were dropped.
Thanks!
------------------------------------------------------------------------------
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20080521/9e06fcb9/attachment.htm
More information about the Winpcap-users
mailing list