Re: [CentOS] tcpdump loses lots of packets

2016-08-15 Thread Steven Tardy
> On Aug 14, 2016, at 6:20 AM, Anand Buddhdev wrote: > > Any ideas why tcpdump loses so many packets? Saw your nanog posts... How many RX queues are configured? What does 'ethtool -S p1p1' show? Any discarded packets in the RX queue(s)? ___ CentOS m

Re: [CentOS] tcpdump loses lots of packets

2016-08-15 Thread Steve Clark
Hello, I've found it is helpful to limit the length of the packet you are capturing by using something like -s 256. On 08/14/2016 06:04 PM, Anand Buddhdev wrote: On 14/08/16 12:20, Anand Buddhdev wrote: Hi folks, I've discovered something. See below: The packet rate is also not that high.

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Anand Buddhdev
On 14/08/16 12:20, Anand Buddhdev wrote: Hi folks, I've discovered something. See below: > The packet rate is also not that high. From the sending side, this is > what I have: > > # tcpreplay -i qtx:p1p1 5min.pcap If I send packets without qtx, like this: tcpreplay -i p1p1 5min.pcap then tcp

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Mike Mohr
Capturing 10 gigabit traffic with no packet loss at line speed is difficult at best. Make sure that you've configured the IRQ affinity properly on the sending and receiving sides to start. On Aug 14, 2016 11:52 AM, "Gordon Messmer" wrote: > On 08/14/2016 03:20 AM, Anand Buddhdev wrote: > >> The

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Gordon Messmer
On 08/14/2016 03:20 AM, Anand Buddhdev wrote: The number 6882162 is exactly the number of DNS queries I am sending from another server (the source). The filter is seeing them. However, not all of them make it into the pcap file. Try specifying "ether host " and compare the pcap files. How are

[CentOS] tcpdump loses lots of packets

2016-08-14 Thread Anand Buddhdev
Hi folks, I've got a Dell R320 running CentOS 7, and a 10G NIC. I'm running a DNS server on it, for testing. As part of my testing, I'm attempting to capture all the DNS queries arriving on the server, using tcpdump. However, tcpdump's performance is abysmal, and it loses lots of the packets. Here