Re: [CentOS] tcpdump loses lots of packets

2016-08-15 Thread Steven Tardy
> On Aug 14, 2016, at 6:20 AM, Anand Buddhdev wrote: > > Any ideas why tcpdump loses so many packets? Saw your nanog posts... How many RX queues are configured? What does 'ethtool -S p1p1' show? Any discarded packets in the RX queue(s)? ___ CentOS m

Re: [CentOS] tcpdump loses lots of packets

2016-08-15 Thread Steve Clark
Hello, I've found it is helpful to limit the length of the packet you are capturing by using something like -s 256. On 08/14/2016 06:04 PM, Anand Buddhdev wrote: On 14/08/16 12:20, Anand Buddhdev wrote: Hi folks, I've discovered something. See below: The packet rate is also not that high.

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Anand Buddhdev
On 14/08/16 12:20, Anand Buddhdev wrote: Hi folks, I've discovered something. See below: > The packet rate is also not that high. From the sending side, this is > what I have: > > # tcpreplay -i qtx:p1p1 5min.pcap If I send packets without qtx, like this: tcpreplay -i p1p1 5min.pcap then tcp

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Mike Mohr
Capturing 10 gigabit traffic with no packet loss at line speed is difficult at best. Make sure that you've configured the IRQ affinity properly on the sending and receiving sides to start. On Aug 14, 2016 11:52 AM, "Gordon Messmer" wrote: > On 08/14/2016 03:20 AM, Anand Buddhdev wrote: > >> The

Re: [CentOS] tcpdump loses lots of packets

2016-08-14 Thread Gordon Messmer
On 08/14/2016 03:20 AM, Anand Buddhdev wrote: The number 6882162 is exactly the number of DNS queries I am sending from another server (the source). The filter is seeing them. However, not all of them make it into the pcap file. Try specifying "ether host " and compare the pcap files. How are

[CentOS] tcpdump loses lots of packets

2016-08-14 Thread Anand Buddhdev
Hi folks, I've got a Dell R320 running CentOS 7, and a 10G NIC. I'm running a DNS server on it, for testing. As part of my testing, I'm attempting to capture all the DNS queries arriving on the server, using tcpdump. However, tcpdump's performance is abysmal, and it loses lots of the packets. Here

Re: [CentOS] tcpdump; how to dump all

2011-01-14 Thread Joe DiTommasso
On Fri, Jan 14, 2011 at 08:21:23AM -0500, Kwan Lowe wrote: > On Fri, Jan 14, 2011 at 5:28 AM, Giles Coochey wrote: > >>How can I dump every packets received by filter ? > > > > I use the following command to make packet captures: > > > > tcpdump -i eth0 -s 0 -w capture.cap > > > > It creates a fil

Re: [CentOS] tcpdump; how to dump all

2011-01-14 Thread Kwan Lowe
On Fri, Jan 14, 2011 at 5:28 AM, Giles Coochey wrote: >>How can I dump every packets received by filter ? > > I use the following command to make packet captures: > > tcpdump -i eth0 -s 0 -w capture.cap > > It creates a file capture.cap that can be read by a packet analyzer - e.g. > wireshark. I

Re: [CentOS] tcpdump; how to dump all

2011-01-14 Thread Giles Coochey
On 14/01/2011 11:26, admin lewis wrote: Hi, My server is connected to the lan and when I run tcpdump I see few packets captured but lots packets received by filter. How can I dump every packets received by filter ? I use the following command to make packet captures: tcpdump -i eth0 -s 0 -w c

[CentOS] tcpdump; how to dump all

2011-01-14 Thread admin lewis
Hi, My server is connected to the lan and when I run tcpdump I see few packets captured but lots packets received by filter. How can I dump every packets received by filter ? ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listin

Re: [CentOS] tcpdump?

2010-02-20 Thread Alexander Dalloz
Am 20.02.2010 07:03, schrieb Hadi Motamedi: > > Dear All > > I have put tcpdump trace on port 4957 on my CentOS server , as the following : > > #tcpdump port 4957 > > I want to obtain the payload data to see what is realy being exchanged > between my CentOS server and the outside network eleme

Re: [CentOS] tcpdump?

2010-02-19 Thread Andrei
use -i ex. tcpdump -i eth0 port 4957 -nn -vv etc. man tcpdump for more options. -- Andrei 2010/2/20 Hadi Motamedi > Dear All > I have put tcpdump trace on port 4957 on my CentOS server , as the > following : > #tcpdump port 4957 > I want to obtain the payload data to see what is realy being

[CentOS] tcpdump?

2010-02-19 Thread Hadi Motamedi
Dear All I have put tcpdump trace on port 4957 on my CentOS server , as the following : #tcpdump port 4957 I want to obtain the payload data to see what is realy being exchanged between my CentOS server and the outside network element . Can you please let me know how I can modify my command ?

[CentOS] tcpdump

2008-11-20 Thread Joseph L. Casale
I have an issue with only a few domains sending mail to a company's exchange server. Topology is as follows: Internet -> PIX -> logical interface / vlan -> HP switch (interface tagged into applicable vlan) -> ESXi server -> vm (ASSP/CentOS Postfix MTA) -> HP switch (out of vlan) -> physical HP s