Winpcap performance issues.

NTDEV
1

Hi,
I’m having a problem with winpcap performance as a simple packet capture and
dump routine is unable to handle more than 20,000 pkts/sec.
Libpcap seems to be able to handle upto 116,000 pkts/sec. on Linux!
Is the problem with the OS or the packet driver? or where is the
problem -NIC level/NDIS level?
Any Ideas/solutions?

Regards,
rck

2

If its speed on W2K/WXP you are seeking, check out www.intercepts.biz.
It’s a startup
still in the development stage but looking for betas.

–Bob Loewer

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Rahul Chander
Kashyap
Sent: Thursday, October 10, 2002 12:52 AM
To: NT Developers Interest List
Subject: [ntdev] Winpcap performance issues.

Hi,
I’m having a problem with winpcap performance as a simple packet capture
and
dump routine is unable to handle more than 20,000 pkts/sec.
Libpcap seems to be able to handle upto 116,000 pkts/sec. on Linux!
Is the problem with the OS or the packet driver? or where is the
problem -NIC level/NDIS level?
Any Ideas/solutions?

Regards,
rck

You are currently subscribed to ntdev as: xxxxx@jamesbimen.com
To unsubscribe send a blank email to %%email.unsub%%

3

With the packet driver, it can use VERY stupid packet driver.

----- Original Message -----
From: “Rahul Chander Kashyap”
To: “NT Developers Interest List”
Sent: Thursday, October 10, 2002 8:51 AM
Subject: [ntdev] Winpcap performance issues.

> Hi,
> I’m having a problem with winpcap performance as a simple packet
capture and
> dump routine is unable to handle more than 20,000 pkts/sec.
> Libpcap seems to be able to handle upto 116,000 pkts/sec. on Linux!
> Is the problem with the OS or the packet driver? or where is the
> problem -NIC level/NDIS level?
> Any Ideas/solutions?
>
> Regards,
> rck
>
>
>
>
>
> —
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to %%email.unsub%%
>

4

I have never made a comparison between Windows and Linux. However, I suspect
that it is a combination of the OS and the packet driver.

The PCAUSA Rawether for Windows driver is able to handle >40K pkts/sec on
Windows, so improvement to the driver can certainly have some effect.

Good luck,

Thomas F. Divine

PCAUSA - Tools & Resources For Network Software Developers
NDIS Protocol/Intermediate/Hooking - TDI Client/Filter
http: - http:

“Rahul Chander Kashyap” wrote in message
news:xxxxx@ntdev…
>
> Hi,
> I’m having a problem with winpcap performance as a simple packet capture
and
> dump routine is unable to handle more than 20,000 pkts/sec.
> Libpcap seems to be able to handle upto 116,000 pkts/sec. on Linux!
> Is the problem with the OS or the packet driver? or where is the
> problem -NIC level/NDIS level?
> Any Ideas/solutions?
>
> Regards,
> rck
>
>
>
>
>
></http:></http:>