2015-10-13 15:23 GMT+02:00 Tobias Klauser <[email protected]>: > How periodic is the traffic you recieve? > > How does it look if you average the values for RX bytes/t?
Traffic is 24/24 and continuous. There is some regular activity peaks around 07:00 or 14:00 (end users connect to our servers so it's always quite random). Here is the average for the exact same minute: - from pcap files: 87 746 306 bps - from ifpps: 100 304 634 bps (12538079,25 bytes) Almost every value from ifpps is greater than the one captured with netsniff-ng (but not all of them). Around the max from iffps values are: - ifpps (bps): 98753008 235113328 119650144 - netsniff-ng (bps): 105770240 93430552 112247968 So I really think that the value fetched from ifpps (/proc/net/dev) are greater than netsniff-ng but I don't get why (again I could be wrong). I don't see any packets dropped or any errors on the interface. I disabled gro, gso and tso with ethtool on the interface but no changes. Thomas -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
