[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-dev
Subject:    [Wireshark-dev] Are Capture Filters Implemented in Software or the Network Card?
From:       X Q <xq1xq1xq1 () gmail ! com>
Date:       2021-11-18 18:53:24
Message-ID: CAOYvYszsiw1V64L8CV+HHcSf03Gopdmmcsxpw04BSfcrNkEJkA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


This is a question fairly deep in the guts of Wireshark that I could not
find an answer to.

When a capture filter is implemented are ALL packets sent to
Wireshark/Dumpcap/TShark at the software level for filtering

or

are the packets not matching the filter shedded/ignored by the Network
Interface card itself thus reducing strain on the CPU/Network Fabric?

I look forward to hearing from you!

[Attachment #5 (text/html)]

<div dir="ltr">This is a question fairly deep in the guts of Wireshark that I could \
not find an answer to.<div><br></div><div>When a capture filter is implemented are \
ALL packets sent to Wireshark/Dumpcap/TShark at the software level for filtering  \
</div><div><br></div><div>or  </div><div><br></div><div>are the packets not matching \
the filter shedded/ignored by the Network Interface card itself thus reducing strain \
on the CPU/Network Fabric?</div><div><br></div><div>I look forward to hearing from \
you!</div></div>


[Attachment #6 (text/plain)]

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe


[prev in list] [next in list] [prev in thread] [next in thread]