Newsgroups : Borland : borland.public.delphi.internet.winsock : 2007 Mar : Re: Missing packets when "sniffing" with winsock.

www.cryer.info
Managed Newsgroup Archive

Re: Missing packets when "sniffing" with winsock.

Subject:Re: Missing packets when "sniffing" with winsock.
Posted by:"Remy Lebeau (TeamB)" (no.spam@no.spam.com)
Date:Mon, 5 Mar 2007 11:56:23

"fp" <free.prefix@gmail.com> wrote in message
news:1173086545.514654.147890@8g2000cwh.googlegroups.com...

> When ethereal shows for example 500 ICMP packets, my program
> shows only around 450, i.e. it is missing packets that Ethereal was
> able to capture.

Ethereal does not use a socket to sniff packets.  It uses the PCap
library to hook into WinSock directly at a lower level.

> Is there a better implementation

Use WinPCap (http://www.winpcap.org) in your own code.


Gambit

Replies:

none

In response to:

www.cryer.info
Managed Newsgroup Archive