This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am attempting to use Wireshark on a laptop using the built-in NIC. The throughput of the traffic being captured is very high and sustained, and it appears I may be dropping traffic (observing "acknowledgement for unseen packet" errors).

I feel the laptop NIC may be inadequate. Purchasing a probe or server with industrial NIC's is a bit overkill, as I only need this for a few days.

Would a separate USB NIC provide the ability to capture higher throughput using the same laptop?

asked 08 Jun '11, 14:17

Husker97's gravatar image

Husker97
1111
accept rate: 0%

retagged 08 Jun '11, 19:41

helloworld's gravatar image

helloworld
3.1k42041


I don't see how a separate USB NIC would help you.

For performance problems like dropped packets, you might try reading the Performance page on the Wireshark wiki. But I would highly recommend using dumpcap instead of Wireshark for capturing if you're dropping too many packets. Besides helping with performance, another benefit of using dumpcap instead of Wireshark is that it will avoid/eliminate any potential "out of memory" problems you could otherwise encounter by using Wireshark, especially if you intend to capture for lengthy periods of time.

You could also try using Windump or tcpdump depending on what OS your laptop is running.

permanent link

answered 08 Jun '11, 16:23

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×69
×57
×35
×24

question asked: 08 Jun '11, 14:17

question was seen: 4,598 times

last updated: 08 Jun '11, 19:41

p​o​w​e​r​e​d by O​S​Q​A