Ask Your Question
0

captured two interfaces with dumpcap at 10Gbits/s

asked 2018-07-04 12:38:33 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

Hello everybody,

I am trying to capture on two interfaces flowing approximately at 7 Gbits/s.

Unfortunately dumpcap lost many packets.

I am running this command : dumpcap -a duration:10 -B 1024 -i 1 - i 4.

I am also trying to add -t in order to use threads, but it doesn't solve my issue.

Even when I increase Buffer size I cannot succeed to get 100% of the packets.

Anyone has ideas in order to solve my issue?

edit retag flag offensive close merge delete

Comments

What OS and version is this? It might not be possible to capture at that rate on standard HW/SW without packet loss.

Anders gravatar imageAnders ( 2018-07-04 12:57:51 +0000 )edit

I am using Windows 7 Pro, the proc is a Intel Xeon E5-2630 with 64Go in RAM

JME gravatar imageJME ( 2018-07-04 13:03:20 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-07-04 17:58:36 +0000

NJL gravatar image

updated 2018-07-06 15:19:52 +0000

JeffMorriss gravatar image

I doubt you'll reach 7Gbps with your choice of OS and hardware. I recommend you read this albeit ageing presentation on how to maximize capture performance. There's also a PDF version.

edit flag offensive delete link more

Comments

@NJL, I converted your excellent comment to an answer - I think it serves well as an answer.

JeffMorriss gravatar imageJeffMorriss ( 2018-07-05 15:42:21 +0000 )edit

Thanks :-)

NJL gravatar imageNJL ( 2018-07-05 17:08:57 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2018-07-04 12:38:33 +0000

Seen: 39 times

Last updated: Jul 06