Don't forget about your network card's bus architecture too. A standard PCI bus (or if you plug a high speed card into a regular PCI bus slot) can not do 1Gbps networking. You'll want at least a 64bit/66MHz bus/slot and ideally PCI-X or high speed PCI Express.
--Jim
From: Gianluca Varenni
Sent: Thu 1/18/2007 2:59 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
Also, the disks can definitely be a bottleneck for such a network speed. The
links Jaap was referring to don't seem to talk about that.
I would definitely use a separate disk, maybe SCSI 10k RPM. Or a fast SATA.
Have a nice day
GV
----- Original Message -----
From: "Jaap Keuter" <jaap.keuter@xxxxxxxxx>
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Sent: Wednesday, January 17, 2007 10:30 PM
Subject: Re: [Wireshark-users] Help on tcpdump or dumpcap
> Hi,
>
> That is some serious speed. That requires adequate hardware and
> processing. Google the net for high speed network capture and see what's
> been said. like:
> http://www.tcpdump.org/lists/workers/2005/01/msg00031.html and this
> http://luca.ntop.org/nCap.pdf
>
> Thanx,
> Jaap
>
> On Thu, 18 Jan 2007, ARAMBULO, Norman R. wrote:
>
>> Sebastien Tandel,
>>
>> Thanks for the info, yup we already tried it but it seems it doesnt work.
>> What we are trying to do is capture packets and save it in another file
>>
>> where tshark or tethereal process it, we tried using tcpdump or dumpcap
>> but it doesnt work, the network is relatively high about approx.
>> 500Mb/sec.
>>
>> Can someone help me. Thanks
>>
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users