On Nov 21, 2021, at 6:36 PM, Gene Cumm wrote:
> FPGA-based network acquisition cards do implement filters in "hardware" (not
> in the system CPU). Napatech, Accolade, Silicom and Chelsio have products.
So change my statement to
...adapter that do the filtering itself have been
On Sun, Nov 21, 2021, 2:07 PM Guy Harris wrote:
> The filtering is *not* done in the network adapter (which isn't
> necessarily a card - it could be built into the computer); an adapter that
> does the filtering itself could probably be built, and libpcap could be
> modified to recognize cards
On Nov 21, 2021, at 11:06 AM, Guy Harris wrote:
> In the capture mechanisms in most UN*Xes (*BSD, macOS, Linux, Solaris, AIX,
> and Tru64 UNIX), and in the capture mechanism provided by the WinPcap and
> Npcap drivers, all packets received by an interface on which capturing is
> being done
On Sun, 21 Nov 2021 at 19:07, Guy Harris wrote:
> On Nov 18, 2021, at 10:53 AM, X Q wrote:
>
> > This is a question fairly deep in the guts of Wireshark that I could not
> find an answer to.
>
> It's so deep in the guts of Wireshark that it's not even in Wireshark!
>
> > When a capture filter
On Nov 18, 2021, at 10:53 AM, X Q wrote:
> This is a question fairly deep in the guts of Wireshark that I could not find
> an answer to.
It's so deep in the guts of Wireshark that it's not even in Wireshark!
> When a capture filter is implemented are ALL packets sent to
>
El dom, 21 de nov. de 2021 a la(s) 13:27, X Q (xq1xq1...@gmail.com) escribió:
>
> This is a question fairly deep in the guts of Wireshark that I could not find
> an answer to.
>
> When a capture filter is implemented are ALL packets sent to
> Wireshark/Dumpcap/TShark at the software level for
On Sun, Nov 21, 2021, 11:27 AM X Q wrote:
> This is a question fairly deep in the guts of Wireshark that I could not
> find an answer to.
>
> When a capture filter is implemented are ALL packets sent to
> Wireshark/Dumpcap/TShark at the software level for filtering
>
> or
>
> are the packets not
This is a question fairly deep in the guts of Wireshark that I could not
find an answer to.
When a capture filter is implemented are ALL packets sent to
Wireshark/Dumpcap/TShark at the software level for filtering
or
are the packets not matching the filter shedded/ignored by the Network
