Improving Passive Packet Capture: Beyond Device Polling

By | January 18, 2005

Passive packet capture is necessary for many activities including network debugging and monitoring. With the advent of fast gigabit networks, packet capture is becoming a problem even on PCs due to the poor performance of popular OSs.

The introduction of device polling has improved the capture process quite a bit but not really solved the problem.This paper proposes a new approach to passive packet capture that combined with device polling further improves it and allows, on fast machines, packets to be captured at (almost) wire speed.

Read the full paper in PDF here

Leave a Reply