Hi Alfredo PFA the traces having vlan and not vlan.
To add more details to this, there are 2 observations - 1. We ran a bigger file of 1 lakh packets, out of which fragments of same packet got distributed across application 2. We ran with the attached file and observed that the 2 packets were going to one application and rest of the packets were to other one. Thanks & Regards On Thu, Nov 10, 2016 at 4:04 PM, Alfredo Cardigliano <[email protected]> wrote: > Hi Gautam > could you provide a pcap we can use to reproduce this? > > Alfredo > > > On 10 Nov 2016, at 11:22, Chandrika Gautam < > [email protected]> wrote: > > > > Hi, > > > > We are using PFRING cluster feature and using cluster_2_tuple and 2 > applications > > are reading from same cluster id. > > > > We have observed that the packets having same source and destination ip > addresses are getting distributed across 2 applications which has > completely tossed our logic as we are trying to assemble the fragments in > our applications. > > > > Is there any bug in PFRING clustering mechanism which is causing this. > > > > Using PFRING 6.2.0 and pfring is loaded with below command - > > insmod pf_ring.ko min_num_slots=409600 enable_tx_capture=0 > > > > I tried with this also. > > insmod pf_ring.ko min_num_slots=409600 enable_tx_capture=0 > enable_frag_coherence=1 > > > > > > Regards, > > Gautam > > > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
multiple_fragments_id35515.pcap
Description: application/cap
multiple_fragments_id35515_wo_vlan.pcap
Description: application/cap
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
