Wireshark mailing list archives

Re: Ideas for 10G capture platform?


From: Anders Broman <anders.broman () ericsson com>
Date: Tue, 8 Jun 2010 11:02:37 +0200

Hi,
I found this article interesting http://staff.washington.edu/corey/gulp/
Regards
Anders 

-----Original Message-----
From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Ian Schorr
Sent: den 8 juni 2010 09:51
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Ideas for 10G capture platform?

I'm also curious.  Although I'm assuming we're in a similar state to the capture situation with 1Gig Ethernet 8 or so 
years, where:

- Few NICs could actually receive and process packets at line speed.
- A surprisingly large number of NICs refused to enter passive mode, and some had problems allocating buffers properly 
for jumbo frame handling.
- There were few, if any, inline capture solutions that could capture bidirectionally, though fiber taps were possible. 
 Copper taps were not yet available.
- For extended captures (more than a few seconds), disk speed is a tremendous bottleneck and nowhere near 
linespeed+full packet capture is possible, even with modestly-expensive RAID solutions.
- Host BUS speeds actually became a problem, either becoming a quick bottleneck when others (NIC+disk) were loosened, 
or exacerbating them.

...But I have done no testing of my own this time around.

-Ian

On Tue, Jun 8, 2010 at 4:52 PM, Joerg Mayer <jmayer () loplof de> wrote:
Hello,

has anyone experience doing 10G-Ethernet capture with Wireshark? I'm 
interested in information about the hardware and problems (performance 
bottlenecks etc).

Thanks
 Joerg
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: