PF_ring and friends: Options for making Linux suck less when capturing packets

[Hal Murray]

> USB sticks are real slow. Even some infinitely fast capture isn't going to
> get around that.  Get a real SSD and put it in enclosure that supports USB
> 3.0? 

I don't think a SSD is necessary.

100 megabits is 12.5 megabytes.

I just did a quick test.  I can read 19-20 megabytes/sec from a rotating disk 
over USB.

That's the raw hardware.  I don't know how much overhead the file system adds.



-- 
These are my opinions, not necessarily my employer's.  I hate spam.