[106474] in North American Network Operators' Group
Re: Hardware capture platforms
daemon@ATHENA.MIT.EDU (Christopher Morrow)
Tue Jul 29 20:13:22 2008
Date: Wed, 30 Jul 2008 01:12:09 +0100
From: "Christopher Morrow" <morrowc.lists@gmail.com>
To: "Jared Mauch" <jared@puck.nether.net>
In-Reply-To: <F59EFDB5-D7B2-4854-9358-EC5486130E90@puck.nether.net>
Cc: "nanog@merit.edu" <nanog@merit.edu>
Errors-To: nanog-bounces@nanog.org
On Wed, Jul 30, 2008 at 12:35 AM, Jared Mauch <jared@puck.nether.net> wrote:
> Check out packet forensics depending on what your ultimate requirements are.
>
I would also add a 'see packet forensics'...
> On Jul 29, 2008, at 7:10 PM, "John A. Kilpatrick" <john@hypergeek.net>
> wrote:
>
>>
>> We've deployed a bunch taps in our network and now we need a platform on
>> which to capture the data. Our bandwidth is currently pretty low but I've
>> got 8 links to tap, which means I need 16 ports. Has anyone done any
>> research on doing accurate packet capture with commodity hardware?
>>
>>
>> --
>> John A. Kilpatrick
>> john@hypergeek.net Email| http://www.hypergeek.net/
>> john-page@hypergeek.net Text pages| ICQ: 19147504
>> remember: no obstacles/only challenges
>>
>>
>
>