[Coral-dev] \Re help data collection

yordanos@cs.ucr.edu yordanos at cs.ucr.edu
Wed Jan 31 11:16:29 PST 2007


Thank you a lot for the information. I had a chat with Endace sales; the
prices are quite high but the quality looks attractive.

Best,
Yordanos G.
> Ken Keys writes:
>  > Endace (http://www.endace.com/) makes several cards capable of
>  > monitoring 10 GB ethernet.  At CAIDA we use the DAG 6.2SE card.
>
> I would second that opinion: get one if you can afford it (currently I
> don't :-( ).  I've had now two 4.23 cards running on OC-48 link (2.5G)
> since May 2004 and it has been quite successful.  I guess I've not
> lost a single packet at card, all problems have been in delivering
> packets for analysis and that system not keeping with pace.
>
> If you are low with budget, you can do something at gigabit speeds
> even with normal NICs, but even when you capture a single GE link,
> then you will lose packets if there are pipe full of those.  Just
> tested one 2x2-core system and it could capture 700 kpps on single
> link, after that it collapsed.  While FreeBSD is generaly better for
> packet capture, it benefits even less from multi-core systems than
> Linux.
>
> --
> Markus Peuhkuri        ! internet: Markus.Peuhkuri at tkk.fi
> TKK/Networking Lab.    ! http://users.tkk.fi/puhuri/
> P.O.Box 3000           ! tel: +358-9-451 2467 fax: +358-9-451 2474
> FIN-02015 TKK  Finland !
>




More information about the Coral-dev mailing list