Wireshark mailing list archives

Re: Are Capture Filters Implemented in Software or the Network Card?


From: Guy Harris <gharris () sonic net>
Date: Sun, 21 Nov 2021 21:50:37 -0800

On Nov 21, 2021, at 6:36 PM, Gene Cumm <gene.cumm () gmail com> wrote:

FPGA-based network acquisition cards do implement filters in "hardware" (not in the system CPU).  Napatech, Accolade, 
Silicom and Chelsio have products.  

So change my statement to 

        ...adapter that do the filtering itself have been built, but libpcap has not been modified to recognize those 
cards and to tell the adapter's driver, rather than the kernel's packet capture mechanism, what the filter program is, 
unless the vendors provide their own version of libpcap that can be installed and that will be used by Wireshark if it 
has been installed.

because that's what would be required for a Wireshark capture to have the filtering be done by the network adapter.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: