Also, the disks can definitely be a bottleneck for such a network speed. The
links Jaap was referring to don't seem to talk about that.
I would definitely use a separate disk, maybe SCSI 10k RPM. Or a fast SATA.
Have a nice day
GV
----- Original Message -----
From: "Jaap Keuter" <jaap.keuter@xxxxxxxxx>
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Sent: Wednesday, January 17, 2007 10:30 PM
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
Hi,
That is some serious speed. That requires adequate hardware and
processing. Google the net for high speed network capture and see what's
been said. like:
http://www.tcpdump.org/lists/workers/2005/01/msg00031.html and this
http://luca.ntop.org/nCap.pdf
Thanx,
Jaap
On Thu, 18 Jan 2007, ARAMBULO, Norman R. wrote:
Sebastien Tandel,
Thanks for the info, yup we already tried it but it seems it doesnt work.
What we are trying to do is capture packets and save it in another file
where tshark or tethereal process it, we tried using tcpdump or dumpcap
but it doesnt work, the network is relatively high about approx.
500Mb/sec.
Can someone help me. Thanks
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users