存档

文章标签 ‘丢包监控’

监控内核丢包的程序

2011年9月11日 评论已被关闭

经常要抓包的,有个叫dropwatch能监控丢包的情况,执行之后start就可以看到了,尚未验证其输出的准确性和真实性。

同时可以用来对比PF_RING的效果。工作原理:

Normally, monitoring for dropped packets requires the creation of a script that periodically polls all the aformentioned interfaces, checking for a change in various counter values. Dropwatch instead listens on a netlink socket for the kernel to inform userspace (apps like dropwatch and any others), that a packet has been dropped. This of course implies that the kernel has some sort of functionality to this end. That functionality (called the netlink Drop Monitor protocol), is currently being reviewed upstream.

奇怪了,我在一个web服务器上跑,掉包也很厉害,为神马啊

24 drops at location 0xc05ee85a
11 drops at location 0xc05c0fd7
23 drops at location 0xc05f4e26
6 drops at location 0xc0617f4a
1 drops at location 0xc05ee85a
6 drops at location 0xc0617f4a
2 drops at location 0xc05c0fd7
6 drops at location 0xc05f6ee4
2 drops at location 0xc0617f4a
1 drops at location 0xc05c0fd7
7 drops at location 0xc0617f4a
1 drops at location 0xc05c0fd7
22 drops at location 0xc05f4e26
13 drops at location 0xc05c0fd7
21 drops at location 0xc05ee85a
7 drops at location 0xc0617f4a
1 drops at location 0xc05f6ee4
14 drops at location 0xc0617f4a
9 drops at location 0xc05f6ee4
2 drops at location 0xc05c0fd7
3 drops at location 0xc0617f4a
18 drops at location 0xc05d6367
18 drops at location 0xc05be8b9
13 drops at location 0xc05c0fd7
16 drops at location 0xc05f4e26
20 drops at location 0xc0617f4a
15 drops at location 0xc05ee85a
5 drops at location 0xc0617f4a
1 drops at location 0xc05c0fd7
3 drops at location 0xc05f6ee4
Got a stop message

阅读全文…