The invention provides a network data real-time acquisition and storage method and device based on WinPcap. The method comprises the steps of achieving initialization, wherein initialization comprisesthe steps that a data collection thread and a data storage thread are created, and a linked list queue is created in a host dynamic memory; starting the data acquisition thread, receiving network data through a WinPCap interface, re-packaging each received data packet, and storing the re-packaged network data to the tail part of the linked list queue in sequence; and when the amount of data stored in the linked list queue reaches a set threshold value, starting the data storage thread, synchronously reading the data from the head of the linked list queue in sequence while writing the data into the tail of the linked list queue, and storing the read data into a host memory. According to the invention, the problem of packet loss during high-speed large-data-volume transmission can be overcome.