Abstract:For the demand of monitoring and analyzing the highspeed network data and predicting the capability ,analyze the solution of the software for saving and reading the original network data. In this paper, take WinPcap as example , particularly prodict each stage of capturing network data with the inner running system, provide the detailed performance evaluation, meanwhile find out the disadvantage of capability and choke point. Then elicit the particular solution which improve the capability of each stage for improving the rate of capturing the packet obviously, saving system cost and leaving abundant resource to process and analyze the pocket. In the end,analyze and demonstrate the solution.