Re: port bonding and taps

From: Bennett Todd (bet_at_rahul.net)
Date: 10/03/03

  • Next message: Darren Bounds: "Packit 0.7 Released!" 
    Date: Fri, 3 Oct 2003 14:46:43 -0400
To: "Sam f. Stover" <sstover@iwc.sytexinc.com>

    2003-10-03T14:04:12 Sam f. Stover:
    > I'd like to know where the overhead imposed by the bonding causes
    > packet drops.

    Please keep an open mind, and make that "where and whether".

    In my experience bonding's overhead was so negligible that I doubt
    it would show up as a critical factor in any configuration.

    Happily, tcpdump -s0 will capture a nice test file from wherever
    you're planning on snorting, and tcpreplay makes it easy to blast it
    back at your snorter. Set up N boxes, where N == twice the number of
    taps you're going to support, and have 'em blast into the bonded
    NICs over crossover cables, with tcpreplay. You can control the
    playback speed, you know how many packets went out, so you can
    subtract from how many were snorted to measure exactly how many were
    dropped.

    -Bennett

  • Next message: Darren Bounds: "Packit 0.7 Released!"

    Relevant Pages

    • Re: Core Impact references
      ... Transmission between gateways? ... "Guaranteed packet delivery" is impossible. ... Either way, as I said earlier, I don't see tcpreplay or Traffic IQ ... When did TCP Replay support the transmission between ...
      (Pen-Test)
    • Re: Question about TCP Replay
      ... > packet for hacking attack. ... Also the tcpreplay win32 version is not working ... Question about the wisdom of replaying a "hacking attack" packet and your ... Outside of a dog, a book is a man's best friend. ...
      (Security-Basics)
    • iptables question...
      ... How can I re-direct a packet sent to eth1 (using tcpreplay, ... come back through eth2? ...
      (comp.os.linux.misc)