Wireshark-users: Re: [Wireshark-users] Capture hardware
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Kok-Yong Tan <ktan@xxxxxxxxxxxxxxxxxxx>
Date: Tue, 13 May 2008 23:12:11 -0400

On May 13, 2008, at 22:21, Hansang Bae wrote:


Kok-Yong Tan wrote:
[snip]

I know that Laura Chappell mentioned in Sharkfest 2008 the need for
special tools for gigabit packet capture and that gigabit NICs won't
work (I'm a newbie to gigabit packet capture so I'm not clear about
the details since Ms. Chappell made cheetahs look like turtles during
Sharkfest--can someone enlighten me as to why a single gigabit NIC
will not work for full-duplex gigabit packet capture?  Does it have
to do with it being lossy due to the speed of the NIC overwhelming
the speed of the data bus on most computers?)


Imagine this:
PC sends 1Gbps  ---(TX)---->  to Server
PC receives     <--(RX)----- 1Gbps from the server.
Now you span TX and RX to *one* Gigabit NIC. You cannot fit 2Gbps worth 
of traffic to a 1Gb NIC.



Ah!  I understand now.  Thank you.
--
Reality Artisans, Inc.            #   Network Wrangling and Delousing
P.O. Box 565, Gracie Station # Apple Certified Help Desk Specialist 
New York, NY 10028-0019           #   Apple Consultants Network member
<http://www.realityartisans.com>  #   Apple Developer Connection member
(212) 369-4876 (Voice)            #   (212) 860-4325 (Fax)