About differences between winpcap and libpcap that I pointed out before; I had run tcpdump on a 100 Mb/s network with about 6-8% utilization for 5 minutes. At last it was printed: 135906 packets received by filter, 0 packets dropped by Kernel.
I had run windump on the same network for 5 minutes again and I had:
80016 packets received by filter, 41728 packets dropped by kernel. I even enlarge the Buffer size to 32M with -B 32000 tag and although it was really better but it had packet loss yet.
what I have understood from this, is that winpcap has more complexities so the packet loss is more than libpcap.
please comment about it.

Reply via email to