Re: [Ethereal-users] Ethereal capabilities

[Guy Harris <guy@xxxxxxxxxxxx>]

On Jul 19, 2006, at 5:26 PM, Bryant Keller wrote:

> Can Ethereal be overwhelmed by too many UDP packets on the network?

Yes, in the sense that the packets might be arriving too fast for it  
to read from the capture mechanism, filling up the queue of packets  
for it to read.  If that queue fills up, the capture mechanism will  
drop subsequent packets.  (That's just the capture mechanism dropping  
them; the networking stack won't drop packets from the main code path  
for packet input just because some capture mechanism drops them.)