On Wed, Aug 05, 2015 at 09:24:29AM +0000, Unnikannan Nair, Jishnu wrote:
> I'm testing with UDP multicast pcap files. TCp replay is sending pcap files
> which contain UDP multicast packets
>
> -----Original Message-----
> From: Vadim Kochan [mailto:[email protected]]
> Sent: 5. august 2015 11:20 AM
> To: Unnikannan Nair, Jishnu
> Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> Subject: Re: [netsniff-ng] captured packets
>
> On Wed, Aug 05, 2015 at 09:14:43AM +0000, Unnikannan Nair, Jishnu wrote:
> > No, its the same. What I cant understand is why is netsniff-ng showing no
> > packet loss even though the packet send are so different.
> >
> > regards
> >
> >
> >
> > -----Original Message-----
> > From: Vadim Kochan [mailto:[email protected]]
> > Sent: 5. august 2015 10:53 AM
> > To: Unnikannan Nair, Jishnu
> > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> > Subject: Re: [netsniff-ng] captured packets
> >
> > On Wed, Aug 05, 2015 at 11:50:05AM +0300, Vadim Kochan wrote:
> > > On Wed, Aug 05, 2015 at 06:42:42AM +0000, Unnikannan Nair, Jishnu wrote:
> > > >
> > > >
> > > > Hi
> > > > Please see the attached file. The screen on left is netsniff and
> > > > on the right is tcpreplay, as you can see packets send by
> > > > tcpreplay is more and netsniff doesn't report loss. Netsniff was
> > > > compiled from the url you send me yesterday :)
> > > >
> > > > Regards
> > > > Jishnu
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: Vadim Kochan [mailto:[email protected]]
> > > > Sent: 4. august 2015 09:45 AM
> > > > To: Unnikannan Nair, Jishnu
> > > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> > > > Subject: Re: [netsniff-ng] captured packets
> > > >
> > > > On Tue, Aug 04, 2015 at 06:45:13AM +0000, Unnikannan Nair, Jishnu wrote:
> > > > > Hi
> > > > > I have tested the new version. I used TCPReplay to send
> > > > > 403356000 packet at 100Mbps . I used netsniff-ng to capture
> > > > > packets and output verbose to a file and the total packets
> > > > > captured is 415716032, which very high. Wonder how there is such
> > > > > high difference. Attached verbose output
> > > > >
> > > > >
> > > > > Regards
> > > > > Jishnu
> > > > >
> > > > > -----Original Message-----
> > > > > From: Vadim Kochan [mailto:[email protected]]
> > > > > Sent: 3. august 2015 12:18 AM
> > > > > To: Unnikannan Nair, Jishnu
> > > > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel Borkmann'
> > > > > Subject: Re: [netsniff-ng] captured packets
> > > > >
> > > > > On Mon, Jul 27, 2015 at 12:11:37PM +0000, Unnikannan Nair, Jishnu
> > > > > wrote:
> > > > > > Thank you :)
> > > > > >
> > > > > >
> > > > > >
> > > > > > -----Original Message-----
> > > > > > From: Vadim Kochan [mailto:[email protected]]
> > > > > > Sent: 27. juli 2015 01:46 PM
> > > > > > To: Unnikannan Nair, Jishnu
> > > > > > Cc: 'Vadim Kochan'; '[email protected]'; 'Daniel
> > > > > > Borkmann'
> > > > > > Subject: Re: [netsniff-ng] captured packets
> > > > > >
> > > > > > On Mon, Jul 27, 2015 at 10:47:18AM +0000, Unnikannan Nair, Jishnu
> > > > > > wrote:
> > > > > > >
> > > > > > > Hi
> > > > > > > Do you have any suggestions for me to solve this issue about
> > > > > > > wrong number of packets shown??
> > > > > > >
> > > > > > > Regards
> > > > > > > Jishnu
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Unnikannan Nair, Jishnu
> > > > > > > Sent: 24. juli 2015 02:48 PM
> > > > > > > To: 'Vadim Kochan'; '[email protected]'
> > > > > > > Subject: RE: [netsniff-ng] captured packets
> > > > > > >
> > > > > > > Hi
> > > > > > > I connected an old COTS sniffer, used by our network team to
> > > > > > > check if it was fault with network, but that sniffer can capture
> > > > > > > the whole packets as said by tcpreplay, where as netsniff-ng
> > > > > > > still shows a lower value, while it doesn't show any packet drops.
> > > > > > >
> > > > > > > Regards
> > > > > > > Jishnu
> > > > > > >
> > > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Vadim Kochan [mailto:[email protected]]
> > > > > > > Sent: 24. juli 2015 01:25 PM
> > > > > > > To: Unnikannan Nair, Jishnu
> > > > > > > Cc: '[email protected]'
> > > > > > > Subject: Re: [netsniff-ng] captured packets
> > > > > > >
> > > > > > > On Fri, Jul 24, 2015 at 11:01:48AM +0000, Unnikannan Nair, Jishnu
> > > > > > > wrote:
> > > > > > > > Hi
> > > > > > > > I'm trying to check if there are any packet loss going on when
> > > > > > > > doing a packet capture dump using netsniff-ng using tcpreplay.
> > > > > > > > I used netsniff to log the verbose output of the whole capture
> > > > > > > > and check if there any dropped packets. The log shows zero
> > > > > > > > dropped packets. So I used a script to add all the packets
> > > > > > > > captured by netsniff-ng but it seems the value I got is not the
> > > > > > > > same as the value shown by tcpreplay at the end of the capture,
> > > > > > > > Why is that??
> > > > > > > > TCP replay send 27388000 and netsniff-ng gets 27386202 with
> > > > > > > > zero dropped packets on the log file.
> > > > > > > >
> > > > > > > >
> > > > > > > > TCPreplay :
> > > > > > > >
> > > > > > > > tcpreplay -i eth1 -M 90Mbps --loop 100 --preload-pcap
> > > > > > > > --sleep-accel=1 /share/capture/job1/*.pcap
> > > > > > > > Output:
> > > > > > > > Actual: 27388000 packets (13649364800 bytes) sent in 1173.92
> > > > > > > > seconds. Rated: 11627168.0 bps, 88.71 Mbps, 23330.38
> > > > > > > > pps
> > > > > > > > Statistics for network device: eth1
> > > > > > > > Attempted packets: 27388000
> > > > > > > > Successful packets: 27388000
> > > > > > > > Failed packets: 0
> > > > > > > > Retried packets (ENOBUFS): 0
> > > > > > > > Retried packets (EAGAIN): 0
> > > > > > > >
> > > > > > > > Netsniff-ng:
> > > > > > > >
> > > > > > > > netsniff-ng -d eth1 --out=/share/capture/ --prefix="job1_"
> > > > > > > > -s -ring-size 4096 --interval 2MiB -f "dst net 224.10.10
> > > > > > > > or dst net 224.11.11" -b 1-4 -V > /share/capture.log
> > > > > > > >
> > > > > > > > capture log :
> > > > > > > >
> > > > > > > >
> > > > > > > > pcap file I/O method: scatter-gather
> > > > > > > > RX,V3: 4096.00 MiB, 65536 Blocks, each 65536 Byte
> > > > > > > > allocated
> > > > > > > > IRQ: eth1:19 > CPU4
> > > > > > > > Running! Hang up with ^C!
> > > > > > >
> > > > > > > HI,
> > > > > > >
> > > > > > > What is the netsniff-ng version which is used in this particular
> > > > > > > example ?
> > > > > > > Or it was compiled from the up-to-date sources ?
> > > > > > >
> > > > > >
> > > > > > Hi,
> > > > > >
> > > > > > I am planning do some testing and investigating but with iperf +
> > > > > > netsniff-ng + network namespaces, but really currently I dont have
> > > > > > time to do it, only at least in few next days.
> > > > > >
> > > > > > Sorry for the delay!
> > > > > > I keep in mind your issue!
> > > > > >
> > > > > > Regards,
> > > > > >
> > > > >
> > > > > Hi,
> > > > >
> > > > > I did some changes for netsniff-ng to make possible to dump total rx
> > > > > stats when dump to multiple pcap files, seems it works for me.
> > > > >
> > > > > I put them on the my github repo as separated branch:
> > > > >
> > > > >
> > > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_
> > > > > vk
> > > > > ocha
> > > > > n_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmu
> > > > > lt
> > > > > iple
> > > > > &d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_0S
> > > > > mD
> > > > > 5rsr
> > > > > pAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=TqYdr
> > > > > J0 Mjef 9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e=
> > > > >
> > > > > so you can try to get total stats after press Ctr+C at the end of
> > > > > sniffing, in the similar way like it is done in the normal single
> > > > > pcap mode.
> > > > >
> > > > > I did some testing with iperf on the same host via network namespace
> > > > > but the real difference was only 1 extra datagram showed by
> > > > > netsniff-ng than in iperf output, but I assume this extra packet is
> > > > > sent by iperf ... but I am going to test it with mz tool from
> > > > > netsniff-ng tools set.
> > > > >
> > > > > Regards,
> > > > >
> > > >
> > > > Hm I expected to see the total Rx stats report at the end, did you use
> > > > latest official repo or from url what I put ? Because my changes were
> > > > pushed only here:
> > > >
> > > >
> > > > https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_vk
> > > > oc
> > > > han_netsniff-2Dng_tree_netsniff-5Fshow-5Fstats-5Fsingle-5Fand-5Fmu
> > > > lt
> > > > iple&d=BQIBAg&c=oTZJxWjXA97U5efbDJZGEg&r=yujiUFePweLdL0YzqX6y67Ob_
> > > > 0S
> > > > mD5rsrpAYb3fUdu0&m=Fck_vIfHEAh13sFve2nLyk_sG_O51ip30g8q9XBnB7k&s=T
> > > > qY drJ0Mjef9OqucmSfGb0WxRdvHS52I5-ITVTsTajg&e=
> > > >
> > > > Actually netsniff-ng collects stats from the Linux kernel ...
> > > >
> > >
> > > Hm, does results differs if you do not use --out but only single pcap ?
> >
> > Sorry I meant if results differs for single pcap if use official version of
> > netsniff-ng.
> >
> And what about one direction traffic like UDP ? Do you have a chance to test
> it?
>
> Regards,
Hi,
I did some testing via network namespace and I used /dev/null as output
pcap file. For traffic generation I used mausezahn:
[ host:veth0 < -- > ns0:veth1 ]
On the host mausezahn output:
$ sudo mausezahn/mausezahn veth0 -A 1.1.1.1 -B 224.0.0.1 -t udp -c 403356000
Do you know what you do?
Mausezahn will send 403356000 frames... 1846.97 seconds (218388 packets per
second)
On the ns0 namespace netsniff-ng output:
$ netsniff-ng/netsniff-ng -i veth1 -s -o /dev/null -f "dst net 224.0.0"
Cannot set system socket memory in /proc/sys/net/core/rmem_max: No such file or
directory
Cannot set system socket memory in /proc/sys/net/core/rmem_default: No such
file or directory
Cannot set system socket memory in /proc/sys/net/core/wmem_max: No such file or
directory
Cannot set system socket memory in /proc/sys/net/core/wmem_default: No such
file or directory
Running! Hang up with ^C!
403356000 packets incoming (0 unread on exit)
403356000 packets passed filter
0 packets failed filter (out of space)
0.0000% packet droprate
1963 sec, 552413 usec in total
May be you can test also with mausezahn ?
Later I will try to perform the similar test but with real pcap file writting.
Regards,
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
