Re: Raw socket performance

["Bryan Hoyt | Brush Technology" <bryan () brush co nz>]

> Depends on which process opens the socket first. The kernel copies

incoming packets to these "taps" one at a time in sequence. Did you
> try launching 'P' first before Wireshark?

No, actually. That's a very good point -- I'll try that.

The project's on hold for a bit, so I won't get a chance to look into it
further just now, but I'll follow up on this when things move ahead.

- Bryan

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe