Re: Libpcap performance under VMWare guest OSes

[Guy Harris <guy () alum mit edu>]

On Dec 10, 2009, at 6:33 PM, Mark Bednarczyk wrote:

> The debian packages are:
>
> ubuntu9-x86:~# dpkg-query --show libpcap0.8
> libpcap0.8      1.0.0-1

I *suspect* that means that it's libpcap 1.0.0, which means that *if* the kernel supports the memory-mapped interface 
to PF_PACKET sockets, libpcap will use it, which might improve the capture performance.  (Run "tcpdump -h" to find out 
the actual libpcap version number, and "uname -r" to get the kernel version number.)

That's the OS running both as a native host and as a guest under Windows XP, right?

What type of network adapters are being used on the host and the guest?  In particular, what drivers are being used?

> deb5-x86:~# dpkg-query --show libpcap0.8
> libpcap0.8      0.9.8-5

And *that* probably means it's libpcap 0.9.8, which means that, unless the Debian folk added memory-mapped interface 
support, libpcap *won't* use the memory-mapped interface.-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.