Is it possible for Wireshark to Capture Real Time Packets with No Packet Drop for Gigabit Ethernet Capturing? If no, is there any other packet analyzer to do such? If yes, how to do it? Thanks!
This question is marked "community wiki".
asked 01 Jun '14, 23:07
Depends on how much traffic there is on the Gigabit link and how fast the packets are coming in. Worst case - no, you can't capture a full gigabit link with standard PC equipment, as Chris Greer has demonstrated on the Wireshark conference last year.
If you really need zero packet drop under all circumstances you'll need special capture equipment, e.g. one of the commercial capture solutions like Wildpackets, Solera Networks etc.
Or you buy a Napatech or Fiberblaze capture card and build your own system with it.
answered 02 Jun '14, 01:59