[Winpcap-users] Problem gathering bytes statistics on Ethernetdevices

[Gianluca Varenni]

  ----- Original Message ----- 
  From: Boaz Brickner 
  To: winpcap-users at winpcap.org 
  Sent: Thursday, July 02, 2009 9:55 PM
  Subject: [Winpcap-users] Problem gathering bytes statistics on Ethernetdevices


  Hi,

  I'm using Windows XP Professional SP3 with Atheros AR8121/AR8113 PCI-E Ethernet Controller.

  I'm following the statistics part of the tutorial: http://www.winpcap.org/docs/docs_40_2/html/group__wpcap__tut9.html

  I'm sniffing the packets I'm sending and I'm sending a batch of Ethernet packets to my Ethernet device.
  If I send N packets with size 60 or greater, I'm receiving all the N packets using the statistics mode.
  However, when I look at the "AcceptedBytes" field according to the winpcap tutorial, I'm receiving exactly 12 bytes more per packet sent.

What if you capture the packets that you transmit (e.g. with Wireshark) instead of using the statistics mode? Do the packets appear ok in this case?

Have a nice day
GV
  Example: If I send 10 packets of 60 bytes, I receive in the statistics mode 10 packets and 720 bytes (instead of 600).
  Example: If I send 100 packets of 500 bytes, I receive in the statistics mode 100 packets and 51,200 bytes (instead of 50,000).

  My guess is that it has something to do with the Ethernet Preamble / Start-of-Frame-Delimiter / Interframe gap fields of the Ethernet protocol since these fields are not part of the sniffed (or sent) packet.
  I'm not sure exactly why these 12 bytes are added to the statistics and would like to know for statistics analysis.

  By the way, if I send packets with less than 60 bytes. The difference I receive per packet is 12 bytes + the number of bytes complementing to 60 bytes. This is obvious since the minimum Ethernet packet size is 60 bytes.

  Example: If I send 100 packets of 25 bytes, I receive in the statistics mode 100 packets and 7,200 bytes (and not 2,500).

  Thank you,

  Boaz.



------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090706/e63e584d/attachment.htm