[Winpcap-users] PPP capture

[Gianluca Varenni]

Akif,

This is probably due to the mintocopy and timeout of WinPcap. WinPcap does not deliver you the packets immediately after they are received by the driver. Packets are batched in kernel mode and delivered to the receiving application when


-          There are at least mintocopy bytes in the kernel buffer

-          After a certain timeout
(whatever happens first).

In order to reduce the delay, you will need to either reduce the timeout or the mintocopy.

Have a nice day
GV

From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Akif Usman
Sent: Thursday, March 10, 2011 11:20 AM
To: winpcap-users at winpcap.org
Subject: [Winpcap-users] PPP capture

HI,

I have installed the winpcap version 3.1 beta and i am capturing from a PPP interface and it captures perfectly. Now i am trying to capture from the same PPP interface using my LIBPCAP program and forward it to another Ethernet interface that connects  further to a second computer (Ethernet NIC) which also has wireshark running on it. When i capture from the second computer i get a strange offset of 0.5 seconds after every x packets. This is very strange. I dont know why wireshark is able to capture from PPP interface on the first computer with proper accuracy and why my LIBPCAP program, which is just forwarding the packets, is introducing a 0.5s [:-O] delay. Please help me out as soon as somebody can.

Best Regards
Fika
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20110314/fcd4e478/attachment.html>