On Nov 21, 2021, at 6:36 PM, Gene Cumm <gene.cumm@xxxxxxxxx> wrote:
> FPGA-based network acquisition cards do implement filters in "hardware" (not in the system CPU). Napatech, Accolade, Silicom and Chelsio have products.
So change my statement to
...adapter that do the filtering itself have been built, but libpcap has not been modified to recognize those cards and to tell the adapter's driver, rather than the kernel's packet capture mechanism, what the filter program is, unless the vendors provide their own version of libpcap that can be installed and that will be used by Wireshark if it has been installed.
because that's what would be required for a Wireshark capture to have the filtering be done by the network adapter.