First problem is probably a network driver or other hardware issue
(possibly the switch itself).

Second problem sounds like a memory leak.  Maybe.  Dunno, since you
didn't say what version of tcpreplay you're using nobody can help you.

Side note: mirror/SPAN ports often drop packets.

--
Aaron Turner
http://synfin.net/         Twitter: @synfinatic
Those who would give up essential Liberty, to purchase a little temporary
Safety, deserve neither Liberty nor Safety.
    -- Benjamin Franklin


On Wed, Jun 17, 2015 at 11:12 AM, Hashem Alaidaros
<aidaros....@gmail.com> wrote:
> Hi, I'm Aid,
> My tesbed: I run tcpreply on a PC1 (ubuntu 12.04 with Dell, i7 CPU, and 32
> RAM, 1Gbps NIC) on eth0 which is connected to a Giga switch which forward
> the traffic (using port mirror) to another PC2 for traffic analysis.
> Pcap size: 11 GB
>
> First, I run the following command
> tcpreplay -i eth0 -M 100 data.pcap
> Then after few seconds suddenly eth0 become down. I need to use ifdown and
> ifup then it works fine, then again down and so on.
> 1) What is the cause? and How to solve this issue?
>
> Then I run the following command (just add -K)
> tcpreplay -i eth0 -K -M 100 data.pcap
> It works and eth0 is not hanging, but RAM (with 32 GB although the pcap size
> is 11 GB) suddenly filled from 5 MB to 32 GB full and system hang (monitored
> by htop).
> 2) What is the cause? and How to solve this issue?
>
> I want to replay the pcap once only
>
> I hope someone answer the two questions above, thanks
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Tcpreplay-users mailing list
> Tcpreplay-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
> Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

------------------------------------------------------------------------------
_______________________________________________
Tcpreplay-users mailing list
Tcpreplay-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tcpreplay-users
Support Information: http://tcpreplay.synfin.net/trac/wiki/Support

Reply via email to