Sorry, I didn't make myself clear. 400Mbit/s is the highest traffic load in our network that I want to capture (I always ran the program during the busiest part of the day). I have limit access to that box, but as far as I know, the CPUs are Intel Pentium III, and the OS is Redhat Linux 8. For the network card, I am sorry I don't have much information. When I ran the program, I didn't check the CPU utilization, but I tried Tcpdump, and got the same problem.
I was wondering if this kind of configuration is enough to capture packets on a link with speed upto 400Mbit/s, without fropping any packets?
Bin
----- Original Message ----- From: "Rick Jones" <[EMAIL PROTECTED]>
To: <tcpdump-workers@lists.tcpdump.org>
Sent: Thursday, January 06, 2005 9:37 PM
Subject: Re: [tcpdump-workers] Capture packets on high-speed link using libpcap
Zhu,Bin wrote:Hi All,
I was trying to capture the packets from the Gbit link (normally 400Mbit/s), the program uses libpcap.
What normally limits it to 400 Mbit/s? CPU? I/O bus? Is the disc on which the capture is stored connected to an HBA on the same bus as the GbE NIC, and what sort of busses are they?
The problem is that I was getting lots of dropped packets (up to 25%), The machine I used a 1.4G dual-cpu machine with 1G network card,
Which CPU running at 1.4G, and which network card? What was the reported CPU utilization of the system and the application running libpcap?
For that matter, which OS?
rick jones
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
