TurboCap capture card?

I just bought what I thought was an Intel PRO/1000 PT Quad card from eBay but was surprised to learn that it has firmware identifying itself as a CACE Technologies TurboCap card.

I Googled around and see this used to be a pretty spendy card sold by CACE Technologies and later Riverbed but that it was discontinued several years ago.

Is this card useful in any way? I'm guessing nowadays full-line capture on Gigabit Ethernet can be easily done in software, right? If so, this card wouldn't really be useful.

Also, can I reflash it with stock Intel firmware?

Short answer: No, Gigabit full line capture is still not easy..

Longer Version:
Reliable 1GBit/s full line capture is still a hard task. You still need special capture devices and drivers. But there seems to be a sw solution from ntop https://www.ntop.org/products/packet-... which should work some intel cards. (But I have never tested).

I have tested some special capture devices and I personally recommend the usage of such devices.

Also have a look here:

https://blog.packet-foo.com/2016/11/t...

https://crnetpackets.com/2018/03/17/h...

2.1k

Christian_R

answered 2019-06-17 15:47:35 +0000, updated 2019-06-18 20:37:47 +0000

edit flag offensive 0 remove flag delete link

Comments

Thanks Christian_R. Very interesting information! Unfortunately, by the time I had received your response, I had already re-programmed the device IDs in the EEPROM and re-flashed the card back to a stock Intel card.

lunadesign (2019-06-18 05:27:08 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

TurboCap capture card? edit

Comments

1 Answer

Comments