I had a look at some of the archived discussions on capture rates.
In summary, capture rates on WinXP/2000 are limited to about 40 Mbps whereas
it is much more on Linux (besides hardware limitations).
Now what my question still is about:
Does it matter if i do or dont the full protocol dissection while capturing?
What i've grasped from the discussion is that in the <100 MBps range CPU
power is not that important and there should be enough CPU power left to do
the analysis stuff without posing further constraints on capture limits?
Lars.
----- Original Message -----
From: "Lars Ruoff" <lars.ruoff@xxxxxxxxxxxxxxxxxx>
To: "Ethereal-Dev" <Ethereal-dev@xxxxxxxxxxxx>
Sent: Tuesday, May 25, 2004 11:05 AM
Subject: [Ethereal-dev] Maximum capture rates with full protocol dissection?
> Hi,
> can anybody tell me what is the maximum reliable capture rate
> ethereal/tethereal support?
> (Didn't find anything in the FAQs about that)
> I'm using it on WinXP with a 1GHz+ class PC.
> Is there a risk of losing packets at a maximum of 100 Mbit/s rates (of 1
> Gbit/s?), when using
> - ethereal (with the GUI and full protocol dissection)
> - tethereal (without output, but still with full protocolet disection (a
> modified version))
> On what else does it depend (capabilities of the NIC?, of disk i/o rates?,
> Win vs Linux?), how does it scale with computer power?
> Any reliable info on that?
> The background is that i want to use tethereal with full protocol
dissection
> running and doing some tap analysis in real time.
>
> Lars Ruoff.
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev