[Winpcap-users] winpcap on vista.

[Amir Aharon]

My god!
We have just verified that the Windows default Sounds is causing the drops of raw Ethernet frames.

It appears that control frames(Raw Ethernet - WinPcap) are being dropped during the browsing period.
Disabling the Windows Audio Service solved the bug, it appears that while browsing the file system some sound events (clicks) are being send to the audio device which probably have higher priority over the Raw Ethernet driver.

possible workaround for this is therefore to disabled the sound events!

Amir.



From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: Monday, March 01, 2010 6:34 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] winpcap on vista.

There are no locks shared between WinPcap and the file system drivers. I do not have the foggiest idea why that happens, it could be everything, really...

GV

From: Amir Aharon<mailto:amira at waves.com>
Sent: Saturday, February 27, 2010 9:44 PM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] winpcap on vista.


1.       CPU is not loaded.

2.       I'm using the Intel Pro 1000 PT desktop adapter.  also tested the GT.

3.       Traffic rate is extremely low( ~3k per sec).

4.       I'm not dumping the packets to disk.

I believe the key to this strange issue is why it drops frames when touching the file system via explorer and why it doesn't happens on xp/win7.

Are there any shared resources (locks?) between WinPcap driver implementation and vista file system?

thanks,
amir.


From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: Thursday, February 25, 2010 9:36 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] winpcap on vista.

Packets can be dropped for a number of reasons, including
- excessive CPU load on the machine
- cheap network cards and high traffic rates
- WinPcap based applications not able to keep up with the traffic rate.

What is the traffic rate we are talking about?
Are you dumping the packets to disk in your application?

Have a nice day
GV

From: Amir Aharon<mailto:amira at waves.com>
Sent: Thursday, February 25, 2010 11:28 AM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: Re: [Winpcap-users] winpcap on vista.

the phenomenon I see is that while browsing local file system, my application misses packets that should have been delivered, meaning per each command frame that is being send a response will be return but sometimes response is being dropped. I don't mean that the application stopped to receive anymore packets from that point .

I have capture the traffic using WireShark and verified the responses are not there also.

it happens on 3 different vista platform, we have one vista system that seems to works fine - we are searching for the differences.

this happens in WinPcap 4.0.2 and 4.1.1

thanks.
Amir.


From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: Thursday, February 25, 2010 6:43 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] winpcap on vista.

There are no known issues about it.

Are you saying that you have a Vista machine, you are sending ethernet frames thru winpcap, and when you browse the local file system on that machine, your transmit application stops sending packets or packets are not transmitted properly?

Does it happen on one single machine or on different machines (all running Vista)?

Which version of WinPcap are you using?

Have a nice day
GV

From: Amir Aharon<mailto:amira at waves.com>
Sent: Thursday, February 25, 2010 4:16 AM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: [Winpcap-users] winpcap on vista.


Hi,
We uses WinPcap on windows(XP, vista & 7) for transmitting raw Ethernet frames to control devices on a local closed network.
However we have notice that RX raw Ethernet frames are being dropped, on vista only, when we browse the local file system.

Are there any known issues regarding this mysterious phenomenon?

thanks,
Amir.

[cid:image001.jpg at 01CABE9F.0E398A90]

Amir Aharon
SW Team Leader

Waves Audio Ltd
Tel: +972 3 608 4001
Mobile: +972 54 7641888
Fax: +972 3 6084056
www.waves.com<http://www.waves.com>  www.maxx.com<http://www.maxx.com>  www.sound.org<http://www.sound.org>  www.waveslive.com<http://www.waveslive.com>




This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential or privileged information. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately notify the sender and delete the e-mail and attached documents.











________________________________
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users
________________________________
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users
________________________________
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100308/b69b435c/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 4549 bytes
Desc: image001.jpg
Url : http://www.winpcap.org/pipermail/winpcap-users/attachments/20100308/b69b435c/attachment-0001.jpg