Lines Matching refs:capture
7 i) capture network traffic with utilities like tcpdump, ii) transmit network
24 In Linux 2.4/2.6/3.x if PACKET_MMAP is not enabled, the capture process is very
26 capture each packet, it requires two if you want to get packet's timestamp
37 It's fine to use PACKET_MMAP to improve the performance of the capture and
47 + How to use mmap() to improve capture process
67 + How to use mmap() directly to improve capture process
74 [setup] socket() -------> creation of the capture socket
80 [capture] poll() ---------> to wait for incoming packets
82 [shutdown] close() --------> destruction of the capture socket and
94 interface where link level information capture is not
102 for capture and transmission. This can be done by mapping the
113 Transmission process is similar to capture as shown below.
144 As capture, each frame contains two parts:
216 Being mapped in the capture process allows reading the captured frames and
332 <frame size> : it's an upper bound of frame's capture size (more on this later)
422 To use one socket for capture and transmission, the mapping of both the
746 *) ~20% increase in packet capture rate
749 *) Non static frame size to capture entire packet payload