ExtraHop / rpcapd

ExtraHop Networks' Packet Forwarder, forked from Wireshark's RPCAPD
28 stars 13 forks source link

rpcapd performance comparison #3

Open gabdu opened 6 years ago

gabdu commented 6 years ago

I am just trying to get rpcapd working on my test servers (still no joy though). Couple of quick questions.

  1. How does rpcapd compare (network bandwidth usage, CPU and Memory usage for same traffic) against others possible solutions like VXLAN/GRE tunnels or simple UDP tunnels over TUN interface?

  2. Any specific workloads (I am looking at sniffing sql traffic) where rpcapd is known to perform bad?

gabdu commented 6 years ago

Any comments will be really helpful.

daluu commented 2 months ago

You should be able to test this today using rpcapd included in the libpcap source code. If not using the code here.

But to my knowledge, no one has publicly shared any performance analysis of rpcapd and rpcap clients.