The counter accounts for all the packets lost by the NPF driver i.e. the packet is received by the driver but the kernel buffer is full. There are no packet drops in the user buffer.
Have a nice day GV -------------------------------------------------- From: "Morrow, Carson" <[email protected]> Sent: Tuesday, August 24, 2010 11:46 AM To: <[email protected]> Subject: Re: [Winpcap-users] Problem with dropped packets > Thanks for getting back to me. > > The number of packets dropped changes as I change the WinPcap buffer and > kernel copy size. The kernel driver buffer is for the NPF driver, > correct? Are packets that are lost in the NPF driver buffer counted in > the pcap_stats_ex data, or does it just count packets dropped from the > user buffer in winpcap.dll? > > Thanks, > Carson > > -----Original Message----- > Date: Thu, 19 Aug 2010 11:12:37 -0700 > From: "Gianluca Varenni" <[email protected]> > Subject: Re: [Winpcap-users] Problem with dropped packets > To: <[email protected]> > Message-ID: <c9c0f2d266ce4c96b6d70fada4968...@nelson3> > Content-Type: text/plain; charset="iso-8859-1" > > Carson, > > if the dropped packet count is zero, then it means that the packets do > not reach the winpcap driver at all, so WinPcap is not dropping the > packets. Possible reasons are: > > 1. the packets are somewhat corrupted (wrong FCS) and the NIC drops them > 2. the packets have the wrong dest MAC address (and since you are not > using promiscuous mode, they are not received by WinPcap) > 3. either the NIC card or the NIC card driver cannot keep up at those > rates. > > Have a nice day > GV > > _______________________________________________ > Winpcap-users mailing list > [email protected] > https://www.winpcap.org/mailman/listinfo/winpcap-users _______________________________________________ Winpcap-users mailing list [email protected] https://www.winpcap.org/mailman/listinfo/winpcap-users
