How to detect actual packet loss by comparing pcap captured on both sides? -
actually i'm trying evaluate performance , efficiency of different protocols. i'm aware tcp implementation considers packet "lost" when either ack timeout or 3 duplicate acks received. cannot tell when packet lost among network.
now i'm capturing packets on both sides of connection via tcpdump, , 2 pcap files. can exact packets lost comparing 2 pcap files? , worth trying?
a direct attempting differing ip packets' ids unmatched ones, first try. problem network adapter splits , combines packets libpcap cannot capture actual ip packets through network.
if don't turn off features such "generic receive offload" on nic, on default, captured on sender side , receiver side not match exactly, differing ids lead wrong conclusion; turning off features splitting/combining packets may affect transporting performance badly , conclusion in other way. i'm in middle of dilemma.
a related post how "gro", "lro" features behave on nic: different tcp packets captured on sender , receiver
Comments
Post a Comment