Live Capture vs Direct Capture
Two mode of capture are available: Live Capture mode, and
Direct Capture mode.
In Live Capture mode, the capture is performed like on any
other network card. The frames are routed to the NDIS driver.
In Direct Capture mode, the frame stream is dumped to the
disk. The capture file format is computed in the ProfiShark
hardware.
ProfiShark NIC
Capture Driver
Network Driver
Capture Driver
(e.g. Winpcap)
18
ProfiShark Hardware, 8ns Timestamp
Direct Capture Format Computation
(NDIS)
Protocol Analyzer
(e.g. Wireshark)
ProfiShark Direct
Capture Driver
HDD/SSD