[Winpcap-users] winpcap capture speed

[Black, Michael (IS)]

Are you doing TCP or UDP?  UDP would be bad for this.
What size packets are you generating?  Smaller packets have a lot more overhead.
Are you sure your data generator is actually sending all packets?
What kind of network card do you have?
What kind of machine do you have (CPU/Mhz)?
What kind of switch are you on?


Michael D. Black
Senior Scientist
Analytics, Production and Services
Advanced GEOINT Systems
Northrop Grumman Information Systems

________________________________
From: winpcap-users-bounces at winpcap.org [winpcap-users-bounces at winpcap.org] on behalf of Александр [sitesv at yandex.ru]
Sent: Thursday, June 27, 2013 9:09 AM
To: winpcap-users at winpcap.org
Subject: EXT :Re: [Winpcap-users] winpcap capture speed

Today, i tested a speed of winpcap capturing by changing network card window size and transmitt speed.
~120 mbit/s = 0 errors (4M window size)
~180 mbit/s = (1-5 errors on 2000000 packets) (32M window size)....
So... WinPcap isn't suitable for high speed capturing.

--
Alex


26.06.2013, 20:55, "Black, Michael (IS)" <Michael.Black2 at ngc.com>:

You need to multi-thread your code.

Not that it is guaranteed but you need to get the packets out of the queue as fast as possible and put them in your own queue.

Of course, you can then end up with an ever-growing queue if your code can't keep up.

If all you do is count packets and NOTHING else does it behave?

What kind of network card do you have?

Michael D. Black
Senior Scientist
Analytics, Production and Services
Advanced GEOINT Systems
Northrop Grumman Information Systems

________________________________________
From: winpcap-users-bounces at winpcap.org<mailto:winpcap-users-bounces at winpcap.org> [winpcap-users-bounces at winpcap.org<mailto:winpcap-users-bounces at winpcap.org>] on behalf of A.L. Kuramshin [alimjankuramshin at gmail.com<mailto:alimjankuramshin at gmail.com>]
Sent: Wednesday, June 26, 2013 11:48 AM
To: winpcap-users at winpcap.org<mailto:winpcap-users at winpcap.org>
Subject: EXT :Re: [Winpcap-users] winpcap capture speed

As for me, it would not help. Packets loss will be delayed a bit, that's it. It will begin for example after 1 million packets or 2 or so, a bit later. Just thoughts.. :)
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org<mailto:Winpcap-users at winpcap.org>
https://www.winpcap.org/mailman/listinfo/winpcap-users
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org<mailto:Winpcap-users at winpcap.org>
https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20130627/63b4bfe7/attachment.html>