[106486] in North American Network Operators' Group
Re: Hardware capture platforms
daemon@ATHENA.MIT.EDU (nathan@robotics.net)
Wed Jul 30 18:44:23 2008
Date: Wed, 30 Jul 2008 17:44:07 -0500 (CDT)
From: nathan@robotics.net
To: "John A. Kilpatrick" <john@hypergeek.net>
In-Reply-To: <20080729155511.R42026@iama.hypergeek.net>
Cc: nanog@merit.edu
Errors-To: nanog-bounces@nanog.org
On Tue, 29 Jul 2008, John A. Kilpatrick wrote:
> We've deployed a bunch taps in our network and now we need a platform on
> which to capture the data. Our bandwidth is currently pretty low but I've
> got 8 links to tap, which means I need 16 ports. Has anyone done any
> research on doing accurate packet capture with commodity hardware?
A hardware based capture card is the only way to get to any real
throughput. Check out Endace cards, that will let you do line rate gig e
or better and has native libpcap interface. You also may want to check out
WildPackets cards.
><>
Nathan Stratton CTO, BlinkMind, Inc.
nathan at robotics.net nathan at blinkmind.com
http://www.robotics.net http://www.blinkmind.com
