Ethereal-dev: Re: [Ethereal-dev] Maximum capture rates with full protocoldissection?
Many people have managed to capture very close to saturated GbE links with
no/neglible packetloss
under finetuned linux boxen.
You need a good hi-performance MB with a good bus system.
Lots of CPU, dual 2+ GHz ?
And i particular a high bandwidth diskbackend. 4 modern fast IDE disk in a
stripe config should be sufficient.
In my experience, no matter how highend the pc is, w2k starts dropping
packets at around 300-400mbit/s then everything above ~600mbit/s is
dropped.
----- Original Message -----
From: "Lars Ruoff"
Sent: Tuesday, May 25, 2004 7:25 PM
Subject: Re: [Ethereal-dev] Maximum capture rates with full
protocoldissection?
> I had a look at some of the archived discussions on capture rates.
> In summary, capture rates on WinXP/2000 are limited to about 40 Mbps
whereas
> it is much more on Linux (besides hardware limitations).
> Now what my question still is about:
> Does it matter if i do or dont the full protocol dissection while
capturing?
> What i've grasped from the discussion is that in the <100 MBps range CPU
> power is not that important and there should be enough CPU power left to
do
> the analysis stuff without posing further constraints on capture limits?
> Lars.
>
> ----- Original Message -----
> From: "Lars Ruoff" <lars.ruoff@xxxxxxxxxxxxxxxxxx>
> To: "Ethereal-Dev" <Ethereal-dev@xxxxxxxxxxxx>
> Sent: Tuesday, May 25, 2004 11:05 AM
> Subject: [Ethereal-dev] Maximum capture rates with full protocol
dissection?
>
>
> > Hi,
> > can anybody tell me what is the maximum reliable capture rate
> > ethereal/tethereal support?
> > (Didn't find anything in the FAQs about that)
> > I'm using it on WinXP with a 1GHz+ class PC.
> > Is there a risk of losing packets at a maximum of 100 Mbit/s rates (of 1
> > Gbit/s?), when using
> > - ethereal (with the GUI and full protocol dissection)
> > - tethereal (without output, but still with full protocolet disection (a
> > modified version))
> > On what else does it depend (capabilities of the NIC?, of disk i/o
rates?,
> > Win vs Linux?), how does it scale with computer power?
> > Any reliable info on that?
> > The background is that i want to use tethereal with full protocol
> dissection
> > running and doing some tap analysis in real time.
> >
> > Lars Ruoff.
> >
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
