Hi, Does libpcap miss a lot of packets if plugged in a 100BT network with high traffic.
This depends on 1. what filter you are using. If you choose a very specific filter. you can easily getaway without anylosses. 2. It also depends on how costly operations you are doing on each packet that you capture. i mean how much time is spend between 2 pcap_reads. Even if you are doing the minimum analysis on each of the caprtured packets there is an upper limit on the volume of traffic you can monitor, which depends on the performance on the pcap_read / pcap_loop. Regarding tcpdump, it depends on what options you turn on, how costly operations you are doing on each packet. For eg if you write to disk every packet which you capture it might might be costly.. cheers ashley I was wondering if anyone has ever checked the performance of tcpdump and especially libpcap under a 100BT connection (or even a 10BT although I am pretty sure there is no significant packet loss on such a line). Does libpcap miss a lot of packets if plugged in a 100BT network with high traffic. Are there any bottlenecks in tcpdump (or libpcap) that might cause packet loss? Thanks _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
