Wireshark-users: [Wireshark-users] 10GigE capture

From: Stuart Kendrick <skendric@xxxxxxxxx>
Date: Thu, 13 May 2010 08:30:22 -0700
Has anyone built their own 10GigE probe? I'm imagining just doing the same thing I've done for 1GigE: NICs from Intel, Cory Satten's Gulp, the fastest storage array I can afford, and a SPAN port.

I've vaguely thought of making the primary storage SSD, to which Gulp writes, then buying slow disk and using a cron job to copy files off SSD as fast as possible. But I haven't actually tried this yet.

And I'm imagining that Cace will deliver a 10GigE version of TurboCap at some point.

Have any tips for me?

--sk

Stuart Kendrick
FHCRC