[Winpcap-users] Regarding sniffing on multiple interfaces.

[Gianluca Varenni]

--------------------------------------------------
From: "Mygapula, Sudheer IN BLR SISL" <sudheer.mygapula at siemens.com>
Sent: Tuesday, June 29, 2010 2:03 AM
To: <winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] Regarding sniffing on multiple interfaces.

>
> I have query regarding response packets.
>
> I have sent some ARP request packets on particular network interface.
>
> I am doing some of my business logic which will take some time let say 5 
> sec.
>
> Now I am trying to reading the response packets from the network interface 
> to which I sent the request. Are still the response packets will be 
> available or not?
>
> My exact question is still how much time the response packets will be 
> available by Winpcap?

Packets accumulate in the kernel buffer of WinPcap until the buffer is full. 
When the buffer gets full and you do not process the packets with 
pcap_next_ex or similar, all the subsequent packets are dropped.

Let me know if this answers your question.

Have a nice day
GV

>
>
> Thanks in advance.
>
>
>
>
> Important notice: This e-mail and any attachment there to contains 
> corporate proprietary information. If you have received it by mistake, 
> please notify us immediately by reply e-mail and delete this e-mail and 
> its attachments from your system.
> Thank You.
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users