can we use Wireshark to capture 100GbE raw ethernet frames?

asked 2022-03-08 09:43:36 +0000

pushpa
1 ●1 ●1 ●1

Hi all!

We are going to implement a 100GbE interface on FPGA without using any UDP/TCP IP stack. So we will not be assigning any IP address to the FPGA board. The FPGA will just send the raw ethernet frames to PC. For PC side, we will use Intel Network Card and PCIe 4.0 m.2 to provide enough storage. In this case, is it still possible to use Wireshark to analyse and capture the data?

Any guidelines would be helpful.

Thank you, Best regards, Pushpa

edit retag flag offensive close merge delete

Comments

Hi Pushpa,

Was looking at doing something similar. Were you able to achieve what you were trying to do?

mwmah ( 2024-12-03 17:52:20 +0000 )edit

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2022-03-08 11:32:57 +0000

SYN-bit

18528 ●9 ●343 ●255 https://SYN-b.it

Capturing the 100GbE traffic will be a challenge as @hugo.vanderkooij already mentioned. As for being able to analyze the data that is generated by the FPGA: as long as the FPGA generates packets that mimic protocols that Wireshark understands, then wireshark will fully dissect the packets. If the ethernet payload is random data or some protocol that wireshark does not understand, then the dissection will stop after the ethernet layer.

edit flag offensive delete link

Comments

Thank you for the guidance. Is there any other GUI programs (open source) that can be used?

Best regards, Pushpa

pushpa ( 2022-03-11 00:50:00 +0000 )edit

If the ethernet payload is random data or some protocol that wireshark does not understand, most network analyzers, whether they're command-line or GUI-based, and whether they're open-source or commercial, will fail to dissect it.

I.e., " If the ethernet payload is random data or some protocol that wireshark does not understand, then the dissection will stop after the ethernet layer." is a generic statement about all network analyzers; read it as " If the ethernet payload is random data or some protocol that your network analyer does not understand, then the dissection will stop after the ethernet layer."

Guy Harris ( 2024-12-04 19:18:20 +0000 )edit

add a comment

answered 2022-03-08 10:48:39 +0000

hugo.vanderkooij
76 ●190 ●4

Capturing high speed is NOT something you should do with Wireshark. 100 GB/s propably requires a serious dedicated system just to capture it.

edit flag offensive delete link

Comments

Thank you for the quick reply. We will be using a dedicated system. Is it still not a good idea to use Wireshark?

Best regards, Pushpa

pushpa ( 2022-03-11 00:49:17 +0000 )edit

add a comment