Wireshark · Wireshark-users: Re: [Wireshark-users] Ideas for 10G capture platform?

[Ian Schorr <ian.schorr@xxxxxxxxx>]

I'm also curious.  Although I'm assuming we're in a similar state to
the capture situation with 1Gig Ethernet 8 or so years, where:

- Few NICs could actually receive and process packets at line speed.
- A surprisingly large number of NICs refused to enter passive mode,
and some had problems allocating buffers properly for jumbo frame
handling.
- There were few, if any, inline capture solutions that could capture
bidirectionally, though fiber taps were possible.  Copper taps were
not yet available.
- For extended captures (more than a few seconds), disk speed is a
tremendous bottleneck and nowhere near linespeed+full packet capture
is possible, even with modestly-expensive RAID solutions.
- Host BUS speeds actually became a problem, either becoming a quick
bottleneck when others (NIC+disk) were loosened, or exacerbating them.

...But I have done no testing of my own this time around.

-Ian

On Tue, Jun 8, 2010 at 4:52 PM, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
> Hello,
>
> has anyone experience doing 10G-Ethernet capture with Wireshark? I'm
> interested in information about the hardware and problems (performance
> bottlenecks etc).
>
> Thanks
>  Joerg