* lua extention for wireshak to trace nfs server latencies
[not found] <74264531.872138.1414263726250.JavaMail.zimbra@desy.de>
@ 2014-10-25 19:13 ` Mkrtchyan, Tigran
2014-10-29 14:47 ` J. Bruce Fields
0 siblings, 1 reply; 2+ messages in thread
From: Mkrtchyan, Tigran @ 2014-10-25 19:13 UTC (permalink / raw)
To: linux-nfs
Dear NFS fellows,
recently I was debugging some NFS related issues and
needed a tool to trace situations when NFS server is slow.
I created a lua extension for tshark which allows to get
such information, but still has the full power of tshark.
example usage:
# for life capture
$ tshark -q -X lua_script:nfs.lua -f "port 2049"
# for a capture file
$ tshark -q -r nfs.dump -X lua_script:nfs.lua
the output looks like:
timestamp client ip server ip time OP
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.001 v4_EXCHANGE_ID
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.001 v4_CREATE_SESSION
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.001 v4_PUTROOTFH
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.002 v4_RECLAIM_COMPLETE
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.001 v4_PUTROOTFH
"Aug 27, 2014 16:44:43.000 CEST" aaaa:bbbb:ccc:10a0::1:7f <=> aaaa:bbbb:ccc:10bf::1:8c 0.001 v4_DESTROY_SESSION
"Aug 27, 2014 16:44:43.000 CEST" a.b.161.127 <=> a.b.191.140 0.001 v4_EXCHANGE_ID
"Aug 27, 2014 16:44:43.000 CEST" a.b.161.127 <=> a.b.191.140 0.001 v4_CREATE_SESSION
"Aug 27, 2014 16:44:43.000 CEST" a.b.161.127 <=> a.b.191.140 0.003 v4_PUTROOTFH
"Aug 27, 2014 16:44:43.000 CEST" a.b.161.127 <=> a.b.191.140 0.002 v4_RECLAIM_COMPLETE
"Aug 27, 2014 16:44:43.000 CEST" a.b.161.127 <=> a.b.191.140 0.004 v4_PUTROOTFH
May be some one need's it as well: https://github.com/kofemann/wireshark_lua
P.S.: is it the right place for such posts or there yet another mailing list or wiki?
Thanks,
Tigran.
^ permalink raw reply [flat|nested] 2+ messages in thread