Ah, I should have mentioned that this is not a new application, it has and does run regularly and successfully taking live multicast data via either kernel sockets, or OpenOnload or ef_vi kernel bypass. The packet replay is a new feature however, and works fine unless the application is configured to use kernel sockets, in which case the kernel currently drops all the replayed packets. Of course I confirm that the associated multicast group membership is as expected prior to launching the replay.
To confirm then, are you saying that tcpreplay should not interfere with the IP stack in the scenario described; that being tcpreplay and application running concurrently on the same box, tcpreplay out eth1 to switch, back to eth2, kernel, and (hopefully) application? Thanks! ________________________________________ From: Aaron Turner <synfina...@gmail.com> Sent: Saturday, July 9, 2016 12:30:07 AM To: Main forum for tcpreplay Subject: Re: [Tcpreplay-users] replayed multicast packets dropped by ip stack The linux kernel IP stack won't deliver multicast packets unless you open the appropriate listener socket. Obviously, without looking at your application code I have no idea if that's your problem, but from the sounds of it that is the most likely issue. Nothing you've said sounds like a tcpreplay bug to me. -- Aaron Turner https://synfin.net/ Twitter: @synfinatic Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin On Fri, Jul 8, 2016 at 1:53 PM, James deCocq <dotmar...@hotmail.com> wrote: > Hi all, > > NICETIES > tcpreplay version: 4.1.0; CentOS 6.7; x86_64 > Multiple Solarflare SFC9120 > > BACKGROUND: > Our application can be built to use one of: > * kernel sockets > * OpenOnload (bespoke network stack, kernel bypass) > * ef_vi (direct to/from VNICs, no stack) > > PROBLEM: > * We test using tcpreplay of captured live multicast packets. > * Replayed packets go out eth1 to the switch and back to eth2. > * When application is built to use onload or ef_vi, it works as expected. > * However when built for kernel stack, replayed packets arrive at eth2 > as expected, but are subsequently dropped by kernel. > > DETAIL: > * Multicast drops appear to originate from 2 spots in the linux stack: > most from ip_rcv(), and some in tpacket_rcv() (the AF_PACKET stuff) > * Captured live data is massaged for playback thusly, addresses redacted: > tcprewrite -C --srcipmap=nnn.nnn.nnn.nnn/26:nnn.nnn.nnn.nnn > --dstipmap=nnn.nnn.nnn.nnn/24:nnn.nnn.nnn.nnn/24 > --enet-smac=00:0F:53:xx:yy:zz --enet-vlan=del -i in.pcap -o out.pcap > * All mods and IP checksums look good in Wireshark, and again, > the application receives expected flow if the kernel stack is not involved. > > QUESTION: > * Of course I noted the caveat about replay on the same box; however > I was not certain that the caveat applied to our use case, > tcpreplay -> eth1 -> switch -> eth2 ->kernel; > however drops from kernel's tpacket_rcv() would seem to suggest yes? > * So is tcpreplay running concurrently with our application likely to be > the cause of the kernel dropping multicast packets in this situation? > > Thanks very much for any assistance you can provide. > > james > > ------------------------------------------------------------------------------ > Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San > Francisco, CA to explore cutting-edge tech and listen to tech luminaries > present their vision of the future. This family event has something for > everyone, including kids. Get more information and register today. > http://sdm.link/attshape > _______________________________________________ > Tcpreplay-users mailing list > Tcpreplay-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/tcpreplay-users > Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Tcpreplay-users mailing list Tcpreplay-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tcpreplay-users Support Information: http://tcpreplay.synfin.net/trac/wiki/Support