Abstract: The invention relates to packet tracing in computer networks. Data packets are captured when entering or exiting the network or at any point within the network protocol stack. Buffers in computer kernel space memory store the packets until the contents of the buffers are written to persistent memory. Each buffer holds one or more data packets and the contents of a buffer are written to persistent memory when a status flag associated with the buffer indicates that it may hold no further packets. Data packets may be continuously captured, or capture may be initiated and/or terminated in response to a special event.

Abstract: The invention relates to packet tracing in computer networks. Data packets 26, 27, 28 are captured when entering or exiting the network 4 or at any point within the network protocol stack 5, 6, 7, 8, 9. Buffers 22, 23, 24, 25 in computer kernel space memory 21 store the packets until the contents of the buffers are written to persistent memory 82. Each buffer 73, 74, 75 holds one or more data packets and the contents of a buffer 73 are written to persistent memory 82 when a status flag 92 associated with the buffer indicates that it may hold no further packets. Data packets may be continuously captured, or capture may be initiated and/or terminated in response to a special event.