> ... the CPUs are Intel Pentium III, and the OS is Redhat Linux 8. For the > network card, I am sorry I don't have much information. When I ran the > program, I didn't check the CPU utilization, but I tried Tcpdump, and got > the same problem. > I was wondering if this kind of configuration is enough to capture packets > on a link with speed up to 400Mbit/s, without dropping any packets?
Not a chance. You'll need at least a P5 (maybe more than one), and probably you should be running a kernel with NAPI network drivers (2.6 or later kernels). You might also want to look into using something like the PF_RING interface, see http://www.ntop.org/PF_RING.html for more information (this will help you get the most out of your hardware, whatever it is). @alex - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
