Ethereal-users: Re: [Ethereal-users] High rate packet capture

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 11 Sep 2003 19:34:52 +1000
From: "Chris Waters"
Sent: Thursday, September 11, 2003 10:34 AM
Subject: [Ethereal-users] High rate packet capture


> Hi,
>
> I am interested in people's experience using tethereal or tcpdump to
capture
> packets from an 100Mbps Ethernet link. On a high spec machine can either
of
> these tools capture at the full network rate in one direction, i.e.
greater
> than 90Mbps, and save all packets to disk? How much load does this place
on
> a machine? Is it a light task or does it provide a heavy load?
>

Tethereal and TCPDump should both be able to handle a saturated 100MBit/s
link just fine even on a moderately
specced machine.

The problems arise when you need to go significantly higher than several
times that throughput.