How to detect actual packet loss by comparing pcap captured on both sides? -


actually i'm trying evaluate performance , efficiency of different protocols. i'm aware tcp implementation considers packet "lost" when either ack timeout or 3 duplicate acks received. cannot tell when packet lost among network.

now i'm capturing packets on both sides of connection via tcpdump, , 2 pcap files. can exact packets lost comparing 2 pcap files? , worth trying?

a direct attempting differing ip packets' ids unmatched ones, first try. problem network adapter splits , combines packets libpcap cannot capture actual ip packets through network.

if don't turn off features such "generic receive offload" on nic, on default, captured on sender side , receiver side not match exactly, differing ids lead wrong conclusion; turning off features splitting/combining packets may affect transporting performance badly , conclusion in other way. i'm in middle of dilemma.

a related post how "gro", "lro" features behave on nic: different tcp packets captured on sender , receiver


Comments

Popular posts from this blog

Android layout hidden on keyboard show -

google app engine - 403 Forbidden POST - Flask WTForms -

c - Why would PK11_GenerateRandom() return an error -8023? -