Skip to main content

Thread: Help - Tcpdump analisys

-

goodmorning,
i'm in trouble gigabit network runs @ 54mb/ps nc , iperf, decrease @ 16-18 mb/ps on samba(also sometime in random speed decrease more until 5mb/ps).

cpu works @ 40% when file transfer active.
disk speed 90 mb/ps.

i've check isn't hardware problem.

i'm tryng debug situation tcpdump, i'm newbye... kindly demand help

code:
smb packet: smbreadx (request)  smb command   =  0x2e           error class   =  0x0            error code    =  0 (0x0)        flags1        =  0x0            flags2        =  0x1            warning: short packet. try increasing snap length  [|smb]                                                 14:59:44.020538 00:40:63:f7:4a:07 > 00:11:d8:1c:91:8c, ethertype ipv4 (0x0800), length 1514: (tos 0x0, ttl 64, id 26451, offset 0, flags [df], proto tcp (6), length 1500)       server.445 > client.6921: flags [.], seq 130124004:130125452, ack 469063, win 22, options [nop,nop,ts val 783283664 ecr 5867456], length 1448warning: packet continued in later tcp segments    smb packet: smbreadx (reply)  smb command   =  0x2e  error class   =  0x0  error code    =  0 (0x0)  flags1        =  0x80  flags2        =  0x1  warning: short packet. try increasing snap length  [|smb]  14:59:44.020548 00:40:63:f7:4a:07 > 00:11:d8:1c:91:8c, ethertype ipv4 (0x0800), length 1514: (tos 0x0, ttl 64, id 26452, offset 0, flags [df], proto tcp (6), length 1500)       server.445 > client.6921: flags [.], seq 130125452:130126900, ack 469063, win 22, options [nop,nop,ts val 783283664 ecr 5867456], length 1448smb-over-tcp packet:(raw data or continuation?)    14:59:44.020556 00:40:63:f7:4a:07 > 00:11:d8:1c:91:8c, ethertype ipv4 (0x0800), length 1514: (tos 0x0, ttl 64, id 26453, offset 0, flags [df], proto tcp (6), length 1500)      server.445 > client.6921: flags [.], seq 130126900:130128348, ack 469063, win 22, options [nop,nop,ts val 783283664 ecr 5867456], length 1448smb-over-tcp packet:(raw data or continuation?)    ^c  69491 packets captured  195249 packets received filter  125758 packets dropped kernel
i don't means of raw data or continuation question , "try increasing snap length".

in advance! kindly regards

hi,

not sure answer question

tcpdump have default capture size packets. if packet bigger size not capture whole packet. snaplen sets biggest size capture.

use option make sure capture whole packet
-s 0

/c


Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [ubuntu] Help - Tcpdump analisys


Ubuntu

Comments

Post a Comment

Popular posts from this blog

Flip address is out of range arduino uno r3

-
hello  guy, trying flash firmware on arduino uno rev3 atmega 16u2 using atmel flip. whenever try , import .hex file program, throws error " address out of range ." have looked around online , haven't found solution. , info helpful. here hex file : https://github.com/nicohood/hoodloader2/blob/master/avr/bootloaders/hexfiles/hoodloader2_0_5_uno_atmega16u2.hex its using arduino uno hid Arduino Forum > Using Arduino > Installation & Troubleshooting > Flip address is out of range arduino uno r3 arduino
Read more

Arduino Uno not uploading

-
hi guys, so, have arduino uno r3 (not wired thing) when try upload sketch (even empty sketch) first takes long in "uploading..." comes error: arduino: 1.8.0 (windows 10), board: "arduino/genuino uno" sketch uses 444 bytes (1%) of program storage space. maximum 32256 bytes. global variables use 9 bytes (0%) of dynamic memory, leaving 2039 bytes local variables. maximum 2048 bytes. avrdude: stk500_recv(): programmer not responding avrdude: stk500_getsync() attempt 1 of 10: not in sync: resp=0x9f avrdude: stk500_recv(): programmer not responding avrdude: stk500_getsync() attempt 2 of 10: not in sync: resp=0x9f avrdude: stk500_recv(): programmer not responding avrdude: stk500_getsync() attempt 3 of 10: not in sync: resp=0x9f avrdude: stk500_recv(): programmer not responding avrdude: stk500_getsync() attempt 4 of 10: not in sync: resp=0x9f avrdude: stk500_recv(): programmer not responding avrdude: stk500_getsync() attempt 5 of 10: not in sync: resp=0x9f avrdude...
Read more

Indesign and MathType fonts

-
i having trouble getting indesign recognize mathtype fonts.  have been told move mathtype fonts on 2 indesign font folder.  copied mt-extra font file mathtype folder , pasted indesign font folder.  nothing changed.  indesign still gives me blank box after copy mt-extra font mathtype -->illustrator-->indesign.   guess need instructions on how transfer of fonts done correctly.  i'v looked @ install fonts manual indesign, not clear me on how it.  need utility fontexplorer this, or there other way.  what's weird working fine until had reinstall osx , reinstall cs3, font trouble started.  need toggle "activate-reactivate' adobe cs3 , don't know how close 20 max on this, worried that.  (i suspect because of note on forum might necessary).  thoughts appreciated. i'm using windows, advice may worth nothing...   1) shouldn't have deactivate id recognize fonts. 2) design science gives fonts away in type 1 , truetype flavors....
Read more