Hardware-accelerated mode restrictions
The Gen3 capture card has a very short list of restrictions while running in hardware-accelerated mode. These restrictions are designed to keep your hardware operating at peak performance when hardware acceleration is enabled.
While a Gen3 capture card runs in hardware-accelerated mode, it cannot:
Connect itself to multiple probe instances without the aid of virtual adapters.
Use overly complex filters that would affect hardware-accelerated performance (rare occurrence). An error message will alert you if the filter is too complex for hardware acceleration, but the filter can be rewritten or tweaked to be accepted.
Use software-based pre-filters. They are mutually exclusive; only one may be used.
Affect statistics-based information, such as Network Trending.
There are two types of filtering that occurs in GigaStor: hardware filtering on the capture card and software filtering in Observer. Hardware filtering only affects which packets are captured on the capture card and saved to the RAID; it does not work with any statistics-based filtering that may occur in the Observer software, such as for Network Trending, Bandwidth Utilization with Filter, and so on. Any packets excluded by the hardware filter are never saved to disk and searchable by the software. In general, you want your hardware filter to allow as many packets through as possible. This ensures the largest number of packets are available for troubleshooting. In some cases, it is desirable to use hardware filtering because you know you do not need certain types of traffic captured and saved by GigaStor. Hardware filtering is only available when using hardware acceleration; it also disables the use of software-based pre-filters. Software filtering has two of its own possibilities when using hardware filtering: 1) sifting through packets after they were written to the RAID by the capture card and 2) controlling what is available for network trending when collecting statistics.
Hardware filtering
Filters packets before they are saved to the RAID. This disables the ability to use software pre-filters in Observer, which rely on the CPUs rather than the capture card to do the processing.
Software post-filtering of packets
Filters packets saved to disk by the capture card, which may or may not have a hardware filter applied. See Observer Filters.
Software filtering of network trending
Filters statistics-based trending data, which is entirely unrelated to packet capture. See Choosing your network trending types.
These are the filtering types usable on a hardware-accelerated virtual adapter:
MAC/IP Address
VLAN Tag (802.1Q)