Wondering if there's any "network" overhead leaving WinPcap installed even
when not analyzing traffic.

Also windering if there's an option to enable/disable winPcap without
uninstalling it.

Thanks

In article <1220566nfec0jb3@news.supernews.com>,
Atlas <atlaspeak@my-deja.com> wrote:
>Wondering if there's any "network" overhead leaving WinPcap installed even
>when not analyzing traffic.

Not sure what you mean by "network overhead"? If WinPcap is idle, there
won't be any network overhead since there is no additional network traffic
generated by WinPcap or the app that loaded it. In general, traffic
analyzers are totally passive and don't create/send packets.

There will be some CPU/memory overhead since WinPcap and it's parent app
will still be in memory.

>Also windering if there's an option to enable/disable winPcap without
>uninstalling it.

What platform (OS) are you using? I'm sure if you don't load the program
that uses WinPcap, then WinPcap won't be taking up memory space if that's
what you're getting at?

========= For LAN/WAN Protocol Analysis, check out PacketView Pro! =========
Patrick Klos Email: patrick@klos.com
Klos Technologies, Inc. Web: http://www.klos.com/
==================== http://www.loving-long-island.com/ ====================

"Patrick Klos" <pklos@osmium.mv.net> wrote in message
news:dvpftr$20vr$1@pyrite.mv.net...
> In article <1220566nfec0jb3@news.supernews.com>,
> Atlas <atlaspeak@my-deja.com> wrote:
>>Wondering if there's any "network" overhead leaving WinPcap installed even
>>when not analyzing traffic.
>
> Not sure what you mean by "network overhead"? If WinPcap is idle, there
> won't be any network overhead since there is no additional network traffic
> generated by WinPcap or the app that loaded it. In general, traffic
> analyzers are totally passive and don't create/send packets.
>
Ignoring packet sniffing techniques, I imagine that WinPcap sits below
tcpip.sys (Windows XP) and "grabs" packets before sending them through the
normal flow. This process will happen even if the parent app isn't
requesting data. If this is the case a CPU cost (negligible?) is introduced.
Or am I Wrong?


Thanks!