I'm also curious. Although I'm assuming we're in a similar state to
the capture situation with 1Gig Ethernet 8 or so years, where:
- Few NICs could actually receive and process packets at line speed.
- A surprisingly large number of NICs refused to enter passive mode,
and some had problems allocating buffers properly for jumbo frame
handling.
- There were few, if any, inline capture solutions that could capture
bidirectionally, though fiber taps were possible. Copper taps were
not yet available.
- For extended captures (more than a few seconds), disk speed is a
tremendous bottleneck and nowhere near linespeed+full packet capture
is possible, even with modestly-expensive RAID solutions.
- Host BUS speeds actually became a problem, either becoming a quick
bottleneck when others (NIC+disk) were loosened, or exacerbating them.
...But I have done no testing of my own this time around.
-Ian
On Tue, Jun 8, 2010 at 4:52 PM, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
> Hello,
>
> has anyone experience doing 10G-Ethernet capture with Wireshark? I'm
> interested in information about the hardware and problems (performance
> bottlenecks etc).
>
> Thanks
> Joerg
