No, its the same. What I cant understand is why is netsniff-ng showing no packet loss even though the packet send are so different.
regards -----Original Message----- From: Vadim Kochan [mailto:[email protected]] Sent: 5. august 2015 10:53 AM To: Unnikannan Nair, Jishnu Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' Subject: Re: [netsniff-ng] captured packets On Wed, Aug 05, 2015 at 11:50:05AM +0300, Vadim Kochan wrote: > On Wed, Aug 05, 2015 at 06:42:42AM +0000, Unnikannan Nair, Jishnu wrote: > > > > > > Hi > > Please see the attached file. The screen on left is netsniff and on > > the right is tcpreplay, as you can see packets send by tcpreplay is > > more and netsniff doesn't report loss. Netsniff was compiled from > > the url you send me yesterday :) > > > > Regards > > Jishnu > > > > > > -----Original Message----- > > From: Vadim Kochan [mailto:[email protected]] > > Sent: 4. august 2015 09:45 AM > > To: Unnikannan Nair, Jishnu > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' > > Subject: Re: [netsniff-ng] captured packets > > > > On Tue, Aug 04, 2015 at 06:45:13AM +0000, Unnikannan Nair, Jishnu wrote: > > > Hi > > > I have tested the new version. I used TCPReplay to send 403356000 > > > packet at 100Mbps . I used netsniff-ng to capture packets and > > > output verbose to a file and the total packets captured is > > > 415716032, which very high. Wonder how there is such high > > > difference. Attached verbose output > > > > > > > > > Regards > > > Jishnu > > > > > > -----Original Message----- > > > From: Vadim Kochan [mailto:[email protected]] > > > Sent: 3. august 2015 12:18 AM > > > To: Unnikannan Nair, Jishnu > > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' > > > Subject: Re: [netsniff-ng] captured packets > > > > > > On Mon, Jul 27, 2015 at 12:11:37PM +0000, Unnikannan Nair, Jishnu wrote: > > > > Thank you :) > > > > > > > > > > > > > > > > -----Original Message----- > > > > From: Vadim Kochan [mailto:[email protected]] > > > > Sent: 27. juli 2015 01:46 PM > > > > To: Unnikannan Nair, Jishnu > > > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann' > > > > Subject: Re: [netsniff-ng] captured packets > > > > > > > > On Mon, Jul 27, 2015 at 10:47:18AM +0000, Unnikannan Nair, Jishnu wrote: > > > > > > > > > > Hi > > > > > Do you have any suggestions for me to solve this issue about wrong > > > > > number of packets shown?? > > > > > > > > > > Regards > > > > > Jishnu > > > > > > > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > From: Unnikannan Nair, Jishnu > > > > > Sent: 24. juli 2015 02:48 PM > > > > > To: 'Vadim Kochan'; '[email protected]' > > > > > Subject: RE: [netsniff-ng] captured packets > > > > > > > > > > Hi > > > > > I connected an old COTS sniffer, used by our network team to check if > > > > > it was fault with network, but that sniffer can capture the whole > > > > > packets as said by tcpreplay, where as netsniff-ng still shows a > > > > > lower value, while it doesn't show any packet drops. > > > > > > > > > > Regards > > > > > Jishnu > > > > > > > > > > > > > > > -----Original Message----- > > > > > From: Vadim Kochan [mailto:[email protected]] > > > > > Sent: 24. juli 2015 01:25 PM > > > > > To: Unnikannan Nair, Jishnu > > > > > Cc: '[email protected]' > > > > > Subject: Re: [netsniff-ng] captured packets > > > > > > > > > > On Fri, Jul 24, 2015 at 11:01:48AM +0000, Unnikannan Nair, Jishnu > > > > > wrote: > > > > > > Hi > > > > > > I'm trying to check if there are any packet loss going on when > > > > > > doing a packet capture dump using netsniff-ng using tcpreplay. I > > > > > > used netsniff to log the verbose output of the whole capture and > > > > > > check if there any dropped packets. The log shows zero dropped > > > > > > packets. So I used a script to add all the packets captured by > > > > > > netsniff-ng but it seems the value I got is not the same as the > > > > > > value shown by tcpreplay at the end of the capture, Why is that?? > > > > > > TCP replay send 27388000 and netsniff-ng gets 27386202 with zero > > > > > > dropped packets on the log file. > > > > > > > > > > > > > > > > > > TCPreplay : > > > > > > > > > > > > tcpreplay -i eth1 -M 90Mbps --loop 100 --preload-pcap > > > > > > --sleep-accel=1 /share/capture/job1/*.pcap > > > > > > Output: > > > > > > Actual: 27388000 packets (13649364800 bytes) sent in 1173.92 > > > > > > seconds. Rated: 11627168.0 bps, 88.71 Mbps, 23330.38 pps > > > > > > Statistics for network device: eth1 > > > > > > Attempted packets: 27388000 > > > > > > Successful packets: 27388000 > > > > > > Failed packets: 0 > > > > > > Retried packets (ENOBUFS): 0 > > > > > > Retried packets (EAGAIN): 0 > > > > > > > > > > > > Netsniff-ng: > > > > > > > > > > > > netsniff-ng -d eth1 --out=/share/capture/ --prefix="job1_" > > > > > > -s -ring-size 4096 --interval 2MiB -f "dst net 224.10.10 or > > > > > > dst net 224.11.11" -b 1-4 -V > /share/capture.log > > > > > > > > > > > > capture log : > > > > > > > > > > > > > > > > > > pcap file I/O method: scatter-gather > > > > > > RX,V3: 4096.00 MiB, 65536 Blocks, each 65536 Byte allocated > > > > > > IRQ: eth1:19 > CPU4 > > > > > > Running! Hang up with ^C! > > > > > > > > > > HI, > > > > > > > > > > What is the netsniff-ng version which is used in this particular > > > > > example ? > > > > > Or it was compiled from the up-to-date sources ? > > > > > > > > > > > > > Hi, > > > > > > > > I am planning do some testing and investigating but with iperf + > > > > netsniff-ng + network namespaces, but really currently I dont have time > > > > to do it, only at least in few next days. > > > > > > > > Sorry for the delay! > > > > I keep in mind your issue! > > > > > > > > Regards, > > > > > > > > > > Hi, > > > > > > I did some changes for netsniff-ng to make possible to dump total rx > > > stats when dump to multiple pcap files, seems it works for me. > > > > > > I put them on the my github repo as separated branch: > > > > > > > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vk > > > ocha > > > n_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmult > > > iple > > > &d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_0SmD > > > 5rsr > > > pAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=TqYdrJ0 > > > Mjef 9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e= > > > > > > so you can try to get total stats after press Ctr+C at the end of > > > sniffing, in the similar way like it is done in the normal single pcap > > > mode. > > > > > > I did some testing with iperf on the same host via network namespace but > > > the real difference was only 1 extra datagram showed by netsniff-ng than > > > in iperf output, but I assume this extra packet is sent by iperf ... but > > > I am going to test it with mz tool from netsniff-ng tools set. > > > > > > Regards, > > > > > > > Hm I expected to see the total Rx stats report at the end, did you use > > latest official repo or from url what I put ? Because my changes were > > pushed only here: > > > > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vkoc > > han_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmult > > iple&d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_0S > > mD5rsrpAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=TqY > > drJ0Mjef9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e= > > > > Actually netsniff-ng collects stats from the Linux kernel ... > > > > Hm, does results differs if you do not use --out but only single pcap ? Sorry I meant if results differs for single pcap if use official version of netsniff-ng. -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
