Packets lost

Packets lost

[Vasantha Kumar Puttappa]

Hi All,
 Please somebody guide me here.

I am tracking all udp packets (in particular, SIP based UDP packets)that
goes through iptables using LOG mechanism.
I use the following command,
    iptables -A INPUT -p udp -j LOG --log-level-4.

In addition, i also run 'Ethereal' to make sure that all the packets
captured goes through iptables as well.

Here is the problem,
  Sometimes, a random number of packets doesnot go through IPtables and
they are completely lost. Although, I can see those packets in Ethereal.

 I tried increasing the backlog queue and ip_queue length, but still no use.
 I am using Netgear's wireless network card (WG511, made in taiwan).


 Somebody please guide me. How do I findout the cause of this.

 Regards
 Vasanth

Re: Packets lost

[Gáspár Lajos]

Vasantha Kumar Puttappa írta:
> Hi All,
>  Please somebody guide me here.
>
> I am tracking all udp packets (in particular, SIP based UDP packets)that
> goes through iptables using LOG mechanism.
> I use the following command,
>     iptables -A INPUT -p udp -j LOG --log-level-4.
>   
Maybe you also need the following rule:
iptables -A FORWARD -p udp -j LOG --log-level-4
> In addition, i also run 'Ethereal' to make sure that all the packets
> captured goes through iptables as well.
>   
Ethereal sees the packets BEFORE iptables.
So maybe some of your rules drops the packet.
> Here is the problem,
>   Sometimes, a random number of packets doesnot go through IPtables and
> they are completely lost. Although, I can see those packets in Ethereal.
>
>  I tried increasing the backlog queue and ip_queue length, but still no use.
>  I am using Netgear's wireless network card (WG511, made in taiwan).
>
>
>  Somebody please guide me. How do I findout the cause of this.
>
>  Regards
>  Vasanth
>   
Swifty

Re: Packets lost

[Vasantha Kumar Puttappa]

Hi Lajos,
 Thanks for responding so fast. I did try adding the forward rule, but
still packets are missing.
 Let me give you more insight into what I am trying do.
 I have a vitrual network interface and 2 physical network interface (one
Ethernet based, and other 802.11 based). The virtual network interface
dynamically binds to any one of the above physical interfaces for packet
transmission. The issue of packet loss occurs **only** during link
switching.

I feel that the following issues might be the possible reasons for the
packet loss.

1. Due to missing soft_IRQ interrupt for packets and hence packet loss ( i
have no proof to back this)
2. Due to incompatible wireless device driver.


Any thoughts on this ?








> Vasantha Kumar Puttappa írta:
>> Hi All,
>>  Please somebody guide me here.
>>
>> I am tracking all udp packets (in particular, SIP based UDP packets)that
>> goes through iptables using LOG mechanism.
>> I use the following command,
>>     iptables -A INPUT -p udp -j LOG --log-level-4.
>>
> Maybe you also need the following rule:
> iptables -A FORWARD -p udp -j LOG --log-level-4
>> In addition, i also run 'Ethereal' to make sure that all the packets
>> captured goes through iptables as well.
>>
> Ethereal sees the packets BEFORE iptables.
> So maybe some of your rules drops the packet.
>> Here is the problem,
>>   Sometimes, a random number of packets doesnot go through IPtables and
>> they are completely lost. Although, I can see those packets in Ethereal.
>>
>>  I tried increasing the backlog queue and ip_queue length, but still no
>> use.
>>  I am using Netgear's wireless network card (WG511, made in taiwan).
>>
>>
>>  Somebody please guide me. How do I findout the cause of this.
>>
>>  Regards
>>  Vasanth
>>
> Swifty
>
>

Re: Packets lost

[Gáspár Lajos]

Vasantha Kumar Puttappa írta:
> Hi Lajos,
>  Thanks for responding so fast. I did try adding the forward rule, but
> still packets are missing.
>  Let me give you more insight into what I am trying do.
>  I have a vitrual network interface and 2 physical network interface (one
> Ethernet based, and other 802.11 based). The virtual network interface
> dynamically binds to any one of the above physical interfaces for packet
> transmission. The issue of packet loss occurs **only** during link
> switching.
>   
What is this "link switching" in real ? What about routing and source 
addresses ?
> I feel that the following issues might be the possible reasons for the
> packet loss.
>
> 1. Due to missing soft_IRQ interrupt for packets and hence packet loss ( i
> have no proof to back this)
> 2. Due to incompatible wireless device driver.
>
>
> Any thoughts on this ?
>   
What if you use a bridge on those three and the condition extension of 
iptables?

Swifty

Packets lost: Softirq

[Vasantha Kumar Puttappa]

Hi All,
 Please somebody guide me here. I desparatley need help regarding this
issue. ( plz do "reply to all")

 I am tracking all udp packets (in particular, SIP based UDP packets)that
goes through the iptables using LOG mechanism.
 I use the following command,
     iptables -A INPUT -p udp -j LOG --log-level-4.
     iptables -A FORWARD -p udp -j LOG --log-level-4

  In addition, i also run 'Ethereal' to make sure that all the packets
captured goes through the iptables as well.

  Here is the problem,
    Sometimes, a random number of packets doesnot go through IPtables and
  they are completely lost. Although, I can see those lost packets in
Ethereal. I tried increasing the backlog queue and ip_queue length, but
still no use.

   I am using Netgear's wireless network card (WG511, made in taiwan).
   Device driver: Prism54
   firmware: isl3890
   Kernel verison-- 2.6.11-6mdk

  Let me give you more insight into what I am trying do.

 I have a vitrual network interface and 2 physical network interface (one
Ethernet based, and other 802.11 based). The virtual network interface
dynamically binds to any one of the above physical interfaces for packet
transmission. The issue of packet loss occurs **only** during link
switching.

I feel that the following issues might be the possible reasons for the
packet loss.

1. Due to missing soft_IRQ interrupt for packets and hence packet loss ( i
have no proof to back this)
2. Due to incompatible wireless device driver.

Somebody please guide me. How do I findout the cause of this.

 Thank you,

  Regards
  Vasanth

Re: Packets lost: Softirq

[Eric Dumazet]

Vasantha Kumar Puttappa a écrit :
> Hi All,
>  Please somebody guide me here. I desparatley need help regarding this
> issue. ( plz do "reply to all")
> 
>  I am tracking all udp packets (in particular, SIP based UDP packets)that
> goes through the iptables using LOG mechanism.
>  I use the following command,
>      iptables -A INPUT -p udp -j LOG --log-level-4.
>      iptables -A FORWARD -p udp -j LOG --log-level-4
> 
>   In addition, i also run 'Ethereal' to make sure that all the packets
> captured goes through the iptables as well.
> 
>   Here is the problem,
>     Sometimes, a random number of packets doesnot go through IPtables and
>   they are completely lost. Although, I can see those lost packets in
> Ethereal. I tried increasing the backlog queue and ip_queue length, but
> still no use.
> 
>    I am using Netgear's wireless network card (WG511, made in taiwan).
>    Device driver: Prism54
>    firmware: isl3890
>    Kernel verison-- 2.6.11-6mdk
> 
>   Let me give you more insight into what I am trying do.
> 
>  I have a vitrual network interface and 2 physical network interface (one
> Ethernet based, and other 802.11 based). The virtual network interface
> dynamically binds to any one of the above physical interfaces for packet
> transmission. The issue of packet loss occurs **only** during link
> switching.
> 
> I feel that the following issues might be the possible reasons for the
> packet loss.
> 
> 1. Due to missing soft_IRQ interrupt for packets and hence packet loss ( i
> have no proof to back this)
> 2. Due to incompatible wireless device driver.
> 

netdev CCed

3) packets are going normally through iptables, but the '-j LOG' is flooded 
and syslog miss some of them.

Just do a : iptables -nvL INPUT

and check packets counters : they should match ethereal ones :)

-j LOG is not designed for logging all packets, just some of them :)

Packets lost

[Daeyoung Kim]

Hi all,

I'm making a packet capture program from the l3fwd. When I send DNS
packets, the wireshark simultaneously gets all the packets on two ports.
However, using my program on promiscuous mode, I can see the packets on
only one port. Do you have any idea of that? Could you give me advice?

Thanks,
Dan