[Winpcap-users] Problem with dropped packets
Gianluca Varenni
gianluca.varenni at cacetech.com
Tue Aug 24 12:00:32 PDT 2010
The counter accounts for all the packets lost by the NPF driver i.e. the
packet is received by the driver but the kernel buffer is full. There are no
packet drops in the user buffer.
Have a nice day
GV
--------------------------------------------------
From: "Morrow, Carson" <Carson.Morrow at Honeywell.com>
Sent: Tuesday, August 24, 2010 11:46 AM
To: <winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] Problem with dropped packets
> Thanks for getting back to me.
>
> The number of packets dropped changes as I change the WinPcap buffer and
> kernel copy size. The kernel driver buffer is for the NPF driver,
> correct? Are packets that are lost in the NPF driver buffer counted in
> the pcap_stats_ex data, or does it just count packets dropped from the
> user buffer in winpcap.dll?
>
> Thanks,
> Carson
>
> -----Original Message-----
> Date: Thu, 19 Aug 2010 11:12:37 -0700
> From: "Gianluca Varenni" <gianluca.varenni at cacetech.com>
> Subject: Re: [Winpcap-users] Problem with dropped packets
> To: <winpcap-users at winpcap.org>
> Message-ID: <C9C0F2D266CE4C96B6D70FADA496851F at NELSON3>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Carson,
>
> if the dropped packet count is zero, then it means that the packets do
> not reach the winpcap driver at all, so WinPcap is not dropping the
> packets. Possible reasons are:
>
> 1. the packets are somewhat corrupted (wrong FCS) and the NIC drops them
> 2. the packets have the wrong dest MAC address (and since you are not
> using promiscuous mode, they are not received by WinPcap)
> 3. either the NIC card or the NIC card driver cannot keep up at those
> rates.
>
> Have a nice day
> GV
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
More information about the Winpcap-users
mailing list