On Tue, Aug 04, 2015 at 06:45:13AM +0000, Unnikannan Nair, Jishnu wrote:
> Hi
> I have tested the new version. I used TCPReplay to send 403356000 packet at
> 100Mbps . I used netsniff-ng to capture packets and output verbose to a file
> and the total packets captured is 415716032, which very high. Wonder how
> there is such high difference. Attached verbose output
>
>
> Regards
> Jishnu
>
> -----Original Message-----
> From: Vadim Kochan [mailto:[email protected]]
> Sent: 3. august 2015 12:18 AM
> To: Unnikannan Nair, Jishnu
> Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> Subject: Re: [netsniff-ng] captured packets
>
> On Mon, Jul 27, 2015 at 12:11:37PM +0000, Unnikannan Nair, Jishnu wrote:
> > Thank you :)
> >
> >
> >
> > -----Original Message-----
> > From: Vadim Kochan [mailto:[email protected]]
> > Sent: 27. juli 2015 01:46 PM
> > To: Unnikannan Nair, Jishnu
> > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> > Subject: Re: [netsniff-ng] captured packets
> >
> > On Mon, Jul 27, 2015 at 10:47:18AM +0000, Unnikannan Nair, Jishnu wrote:
> > >
> > > Hi
> > > Do you have any suggestions for me to solve this issue about wrong number
> > > of packets shown??
> > >
> > > Regards
> > > Jishnu
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: Unnikannan Nair, Jishnu
> > > Sent: 24. juli 2015 02:48 PM
> > > To: 'Vadim Kochan'; '[email protected]'
> > > Subject: RE: [netsniff-ng] captured packets
> > >
> > > Hi
> > > I connected an old COTS sniffer, used by our network team to check if it
> > > was fault with network, but that sniffer can capture the whole packets as
> > > said by tcpreplay, where as netsniff-ng still shows a lower value, while
> > > it doesn't show any packet drops.
> > >
> > > Regards
> > > Jishnu
> > >
> > >
> > > -----Original Message-----
> > > From: Vadim Kochan [mailto:[email protected]]
> > > Sent: 24. juli 2015 01:25 PM
> > > To: Unnikannan Nair, Jishnu
> > > Cc: '[email protected]'
> > > Subject: Re: [netsniff-ng] captured packets
> > >
> > > On Fri, Jul 24, 2015 at 11:01:48AM +0000, Unnikannan Nair, Jishnu wrote:
> > > > Hi
> > > > I'm trying to check if there are any packet loss going on when doing a
> > > > packet capture dump using netsniff-ng using tcpreplay. I used netsniff
> > > > to log the verbose output of the whole capture and check if there any
> > > > dropped packets. The log shows zero dropped packets. So I used a script
> > > > to add all the packets captured by netsniff-ng but it seems the value I
> > > > got is not the same as the value shown by tcpreplay at the end of the
> > > > capture, Why is that??
> > > > TCP replay send 27388000 and netsniff-ng gets 27386202 with zero
> > > > dropped packets on the log file.
> > > >
> > > >
> > > > TCPreplay :
> > > >
> > > > tcpreplay -i eth1 -M 90Mbps --loop 100 --preload-pcap
> > > > --sleep-accel=1 /share/capture/job1/*.pcap
> > > > Output:
> > > > Actual: 27388000 packets (13649364800 bytes) sent in 1173.92 seconds.
> > > > Rated: 11627168.0 bps, 88.71 Mbps, 23330.38 pps
> > > > Statistics for network device: eth1
> > > > Attempted packets: 27388000
> > > > Successful packets: 27388000
> > > > Failed packets: 0
> > > > Retried packets (ENOBUFS): 0
> > > > Retried packets (EAGAIN): 0
> > > >
> > > > Netsniff-ng:
> > > >
> > > > netsniff-ng -d eth1 --out=/share/capture/ --prefix="job1_" -s
> > > > -ring-size 4096 --interval 2MiB -f "dst net 224.10.10 or dst net
> > > > 224.11.11" -b 1-4 -V > /share/capture.log
> > > >
> > > > capture log :
> > > >
> > > >
> > > > pcap file I/O method: scatter-gather
> > > > RX,V3: 4096.00 MiB, 65536 Blocks, each 65536 Byte allocated
> > > > IRQ: eth1:19 > CPU4
> > > > Running! Hang up with ^C!
> > >
> > > HI,
> > >
> > > What is the netsniff-ng version which is used in this particular example ?
> > > Or it was compiled from the up-to-date sources ?
> > >
> >
> > Hi,
> >
> > I am planning do some testing and investigating but with iperf +
> > netsniff-ng + network namespaces, but really currently I dont have time to
> > do it, only at least in few next days.
> >
> > Sorry for the delay!
> > I keep in mind your issue!
> >
> > Regards,
> >
>
> Hi,
>
> I did some changes for netsniff-ng to make possible to dump total rx stats
> when dump to multiple pcap files, seems it works for me.
>
> I put them on the my github repo as separated branch:
>
>
> https://github.com/vkochan/netsniff-ng/tree/netsniff_show_stats_single_and_multiple
>
> so you can try to get total stats after press Ctr+C at the end of sniffing,
> in the similar way like it is done in the normal single pcap mode.
>
> I did some testing with iperf on the same host via network namespace but the
> real difference was only 1 extra datagram showed by netsniff-ng than in iperf
> output, but I assume this extra packet is sent by iperf ... but I am going to
> test it with mz tool from netsniff-ng tools set.
>
> Regards,
>
Hm I expected to see the total Rx stats report at the end, did you use
latest official repo or from url what I put ? Because my changes were
pushed only here:
https://github.com/vkochan/netsniff-ng/tree/netsniff_show_stats_single_and_multiple
Actually netsniff-ng collects stats from the Linux kernel ...
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
