Ethereal-dev: Re: [Ethereal-dev] Maximum capture rates with full protocoldissection?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ulf Lamping" <ulf.lamping@xxxxxx>
Date: Tue, 25 May 2004 12:52:20 +0200
Ethereal development <ethereal-dev@xxxxxxxxxxxx> schrieb am 25.05.04 12:38:20:
> 
> Many people have managed to capture very close to saturated GbE links with
> no/neglible packetloss
> under finetuned linux boxen.
> 
> You need a good hi-performance MB with a good bus system.
> Lots of CPU, dual 2+ GHz ?
> 
> And i particular a high bandwidth diskbackend.   4 modern fast IDE disk in a
> stripe config should be sufficient.
> 
> 
> In my experience,   no matter how highend the pc is,  w2k starts dropping
> packets at around 300-400mbit/s   then everything above ~600mbit/s is
> dropped.
> 
> 

I've been reported by colleagues (not tested myself), that increasing the new option "Buffer size x megabyte(s)" (currently available on win32 and ethereal only) to something more than 1MB (let's say 10MB) will significantly lower packet drops while capturing high traffic. This option set's the drivers buffer size on win32, which is 1MB default on this platform (winpcap).

Sorry, but I don't have any measured values on this topic.

Regards, ULFL

_____________________________________________________________________
Endlich SMS mit Bildern versenden! Das Bild selbst ist dabei gratis,
Sie bezahlen lediglich den Versand. http://freemail.web.de/?mc=021195