Guy Harris wrote:
I don't know whether any of the mechanisms used for packet capture will
deliver packets in an order other than the order in which they are
received by the network interface device or processed by the driver.
On a multiprocessor RedHat 9 Linux box with an SMP kernel, packet capt
f Guy Harris
Sent: Friday, December 31, 2004 2:29 AM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] newbie question
Navis wrote:
> You said about buffer, could you explain about what this buffer is?
Packet capturing with libpcap uses a mechanism in the OS (or, in the
case of
Navis wrote:
You said about buffer, could you explain about what this buffer is?
Packet capturing with libpcap uses a mechanism in the OS (or, in the
case of Windows and WinPcap, a driver that comes with WinPcap that uses
a mechanism in the OS, and that runs in the kernel).
Different mechanisms
TECTED] On Behalf Of Guy Harris
Sent: Thursday, December 30, 2004 3:42 AM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] newbie question
It'd be caused by the sniffer not being able to read packets fast enough
that whatever buffer the OS uses in the capture mechanism
durung_lulus wrote:
I want to make simple sniffer, but having question in mind,
Could we loose any packet that we try to grab with
pcap_loop/pcap_dispatch?
Yes.
And if we do, what are the causes?
It'd be caused by the sniffer not being able to read packets fast enough
that whatever buffer the OS
hi all,
I want to make simple sniffer, but having question in
mind,
Could we loose any packet that we try to grab with
pcap_loop/pcap_dispatch? And if we do, what are the
causes?
hope some one can explain it in details, or maybe
referrence.
