[OT] tcpdump overhead

2008-09-09 Thread Mario Lobo

   Hello;
   I am doing a final paper for my post-graduate studies. The paper is
   about QOS on a corporate environment.
   One of the issues involved in the network measurements I am going to
   make is how much overhead tcpdump will have on them (if any). It seems
   to me that this overhead can be disregarded as influential but, if
   this is right, I need some proper source that I can quote and index
   on my paper.
   Could anyone show some directions for any official documentation on
   this? or maybe some opinions, sugestions from you guys on this subject
   that I could officially put on this paper?
   well, thanks and sorry for this off-topic.
   Mario Lobo
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: [OT] tcpdump overhead

2008-09-09 Thread Wojciech Puchar

  make is how much overhead tcpdump will have on them (if any). It seems
  to me that this overhead can be disregarded as influential but, if


depends how kmuch packets are actually gathered. if you tcpdump everything 
from loaded gigabit link it won't be small. you will have to use at least 
2-disk stripping to be able to write data ;)



i don't know if it's official docs, just generate some traffic, observe 
how much CPU is idle, then add tcpdump to the mix and do the math.


simple
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


[OT?] tcpdump overhead

2008-03-10 Thread Mario Lobo
Hi there;

Forgive this possible OT (and lame) question.

I am writing a final paper for a PG course and  I need to take precise 
measurements on network performance. I gonna be doing lots of packet dumps 
and I would like to know you guys' opinion on how much of tcpdump overhead 
(if meaningful for these measurements) I should take into account.

If there are any readings on the subject you could point me to...

Thanks
-- 
Mario Lobo
Segurança de Redes - Desenvolvimento e Análise
IPAD - Instituto de Pesquisa e Apoio ao Desenvolvimento Tecnológico e 
Científico


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [OT?] tcpdump overhead

2008-03-10 Thread Wojciech Puchar


I am writing a final paper for a PG course and  I need to take precise
measurements on network performance. I gonna be doing lots of packet dumps
and I would like to know you guys' opinion on how much of tcpdump overhead
(if meaningful for these measurements) I should take into account.

If there are any readings on the subject you could point me to...


no idea but small for sure. it would rather cause tcpdump to not catch all 
packets that network performance drop.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: [OT?] tcpdump overhead

2008-03-10 Thread Mario Lobo
On Monday 10 March 2008, you wrote:
  I am writing a final paper for a PG course and  I need to take precise
  measurements on network performance. I gonna be doing lots of packet
  dumps and I would like to know you guys' opinion on how much of tcpdump
  overhead (if meaningful for these measurements) I should take into
  account.
 
  If there are any readings on the subject you could point me to...

 no idea but small for sure. it would rather cause tcpdump to not catch all
 packets that network performance drop.

Thanks for the reply Wojciech.

Forgive my english but I couldn't quite get what you meant by:

it would rather cause tcpdump to not catch all packets that network 
performance drop.

Could you rephrase that for me please ?

Thanks
-- 
Mario Lobo
Segurança de Redes - Desenvolvimento e Análise
IPAD - Instituto de Pesquisa e Apoio ao Desenvolvimento Tecnológico e 
Científico


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]