Hi everyone,

I try to test a network monitoring software with "real" traffic. I have a dump that I can use for these tests. My idea is to use pfsend to transmit that dump but it does not quite work the way I want it to:

The file contains 12 million packets with an average packet size of 812 bytes.
Pfsend transmits that file in roughly a second with an average rate of 12 million packets per second on a 10 Gbps link. (see below for program output)

The maximal packet rate for 812-byte-packets on a 10 Gbps link is about 1.5 million packets/s, according to pfsend.

I have two questions:
 - What is the reason for this difference? (1.5 vs. 12 million packets/s)
- Is there a way to send that dump at a rate that is realistic for the average packet size?

Best regards,
Martin

martin@c703ti-test2:~/dumps$ capinfos somedump.pcap
File name:           somedump.pcap
File type:           Wireshark/tcpdump/... - libpcap
File encapsulation:  Ethernet
Number of packets:   12165561
File size:           1000000046 bytes
Data size:           9880722917 bytes
Capture duration:    157 seconds
Start time:          Tue Sep 28 12:53:31 2010
End time:            Tue Sep 28 12:56:08 2010
Data byte rate:      62853377.97 bytes/sec
Data bit rate:       502827023.73 bits/sec
Average packet size: 812.19 bytes
Average packet rate: 77387.72 packets/sec

martin@c703ti-test2:~/dumps$ sudo ~/ntop/userland/examples/pfsend -i dna1 -f somedump.pcap -r 10
Sending packets on dna1
Using PF_RING v.5.5.3
Estimated CPU freq: 3177612000 Hz
Read 12165561 packets from pcap file somedump.pcap
Number of 70-byte Packet Per Second at 10.00 Gbit/s: 13888888.89
NOT using zero-copy: TX ring size (8192) is not a multiple of the number of unique packets to send (12165561)
Dumping statistics on /proc/net/pf_ring/stats/17225-dna1.5
TX rate: [current 13'167'730.64 pps/9.50 Gbps][average 13'167'730.64 pps/9.50 Gbps][total 12'165'561.00 pkts] TX rate: [current 0.00 pps/0.00 Gbps][average 11'857'295.04 pps/8.56 Gbps][total 12'165'561.00 pkts]

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to