Hi Please see the attached file. The screen on left is netsniff and on the right is tcpreplay, as you can see packets send by tcpreplay is more and netsniff doesn't report loss. Netsniff was compiled from the url you send me yesterday :)
Regards Jishnu -----Original Message----- From: Vadim Kochan [mailto:[email protected]] Sent: 4. august 2015 09:45 AM To: Unnikannan Nair, Jishnu Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' Subject: Re: [netsniff-ng] captured packets On Tue, Aug 04, 2015 at 06:45:13AM +0000, Unnikannan Nair, Jishnu wrote: > Hi > I have tested the new version. I used TCPReplay to send 403356000 > packet at 100Mbps . I used netsniff-ng to capture packets and output > verbose to a file and the total packets captured is 415716032, which > very high. Wonder how there is such high difference. Attached verbose > output > > > Regards > Jishnu > > -----Original Message----- > From: Vadim Kochan [mailto:[email protected]] > Sent: 3. august 2015 12:18 AM > To: Unnikannan Nair, Jishnu > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' > Subject: Re: [netsniff-ng] captured packets > > On Mon, Jul 27, 2015 at 12:11:37PM +0000, Unnikannan Nair, Jishnu wrote: > > Thank you :) > > > > > > > > -----Original Message----- > > From: Vadim Kochan [mailto:[email protected]] > > Sent: 27. juli 2015 01:46 PM > > To: Unnikannan Nair, Jishnu > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' > > Subject: Re: [netsniff-ng] captured packets > > > > On Mon, Jul 27, 2015 at 10:47:18AM +0000, Unnikannan Nair, Jishnu wrote: > > > > > > Hi > > > Do you have any suggestions for me to solve this issue about wrong number > > > of packets shown?? > > > > > > Regards > > > Jishnu > > > > > > > > > > > > > > > -----Original Message----- > > > From: Unnikannan Nair, Jishnu > > > Sent: 24. juli 2015 02:48 PM > > > To: 'Vadim Kochan'; '[email protected]' > > > Subject: RE: [netsniff-ng] captured packets > > > > > > Hi > > > I connected an old COTS sniffer, used by our network team to check if it > > > was fault with network, but that sniffer can capture the whole packets as > > > said by tcpreplay, where as netsniff-ng still shows a lower value, while > > > it doesn't show any packet drops. > > > > > > Regards > > > Jishnu > > > > > > > > > -----Original Message----- > > > From: Vadim Kochan [mailto:[email protected]] > > > Sent: 24. juli 2015 01:25 PM > > > To: Unnikannan Nair, Jishnu > > > Cc: '[email protected]' > > > Subject: Re: [netsniff-ng] captured packets > > > > > > On Fri, Jul 24, 2015 at 11:01:48AM +0000, Unnikannan Nair, Jishnu wrote: > > > > Hi > > > > I'm trying to check if there are any packet loss going on when doing a > > > > packet capture dump using netsniff-ng using tcpreplay. I used netsniff > > > > to log the verbose output of the whole capture and check if there any > > > > dropped packets. The log shows zero dropped packets. So I used a script > > > > to add all the packets captured by netsniff-ng but it seems the value I > > > > got is not the same as the value shown by tcpreplay at the end of the > > > > capture, Why is that?? > > > > TCP replay send 27388000 and netsniff-ng gets 27386202 with zero > > > > dropped packets on the log file. > > > > > > > > > > > > TCPreplay : > > > > > > > > tcpreplay -i eth1 -M 90Mbps --loop 100 --preload-pcap > > > > --sleep-accel=1 /share/capture/job1/*.pcap > > > > Output: > > > > Actual: 27388000 packets (13649364800 bytes) sent in 1173.92 seconds. > > > > Rated: 11627168.0 bps, 88.71 Mbps, 23330.38 pps > > > > Statistics for network device: eth1 > > > > Attempted packets: 27388000 > > > > Successful packets: 27388000 > > > > Failed packets: 0 > > > > Retried packets (ENOBUFS): 0 > > > > Retried packets (EAGAIN): 0 > > > > > > > > Netsniff-ng: > > > > > > > > netsniff-ng -d eth1 --out=/share/capture/ --prefix="job1_" -s > > > > -ring-size 4096 --interval 2MiB -f "dst net 224.10.10 or dst net > > > > 224.11.11" -b 1-4 -V > /share/capture.log > > > > > > > > capture log : > > > > > > > > > > > > pcap file I/O method: scatter-gather > > > > RX,V3: 4096.00 MiB, 65536 Blocks, each 65536 Byte allocated > > > > IRQ: eth1:19 > CPU4 > > > > Running! Hang up with ^C! > > > > > > HI, > > > > > > What is the netsniff-ng version which is used in this particular example ? > > > Or it was compiled from the up-to-date sources ? > > > > > > > Hi, > > > > I am planning do some testing and investigating but with iperf + > > netsniff-ng + network namespaces, but really currently I dont have time to > > do it, only at least in few next days. > > > > Sorry for the delay! > > I keep in mind your issue! > > > > Regards, > > > > Hi, > > I did some changes for netsniff-ng to make possible to dump total rx stats > when dump to multiple pcap files, seems it works for me. > > I put them on the my github repo as separated branch: > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vkocha > n_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmultiple > &d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_0SmD5rsr > pAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=TqYdrJ0Mjef > 9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e= > > so you can try to get total stats after press Ctr+C at the end of sniffing, > in the similar way like it is done in the normal single pcap mode. > > I did some testing with iperf on the same host via network namespace but the > real difference was only 1 extra datagram showed by netsniff-ng than in iperf > output, but I assume this extra packet is sent by iperf ... but I am going to > test it with mz tool from netsniff-ng tools set. > > Regards, > Hm I expected to see the total Rx stats report at the end, did you use latest official repo or from url what I put ? Because my changes were pushed only here: https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vkochan_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmultiple&d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_0SmD5rsrpAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=TqYdrJ0Mjef9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e= Actually netsniff-ng collects stats from the Linux kernel ... -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
