I want to know what the max network traffic that Wireshark(WinPcap) can capture without packet losses ? asked 04 Mar '15, 20:27  msphone |
One Answer:
As fast as the platform will let you. This depends on how fast the network hardware can receive packets (its line speed), then how fast the network driver can push them into the network stack, then how fast the network stack can get copies to the capture interface, then how fast winpcap can process these (are there filters to be applied?), then how fast the file system can flush the writes out to storage. And all this software may be running on the same OS, maybe sharing a core and memory. As you can see, there's no theoretical limit (maybe there is one in the API's used, I don't know), only a practical one, and its multi faceted. answered 05 Mar '15, 06:01  Jaap ♦ |
Thanks a lot
If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.