Hello, i am running iperf to send traffic from one computer to another, & i am using tcpdump to capture packets (1000,000 and more) on both sides of the sender and receiver, the problem is tcpdump captured much LESS than the 1 million packets on both sides, and i changed the test duration randomly from 10 seconds to 100 seconds, it solved the problem at the sender-side & i got my 1000,000 captures, but NOT at the receiver where i got only 108,000 captures, now i don't know what is causing this, and i could not find an answer on the internet, any help to get my 1 million captures at the sender and receiver??
i used for the server: iperf -s
And for the client: iperf -c ipAddress -t 100
and for the capture tool i used: tcpdump -i eth1 -s 0 -c 1000000 -w /dev/shm/new.pcap "tcp"
asked 09 Jul '15, 10:49
edited 13 Jul '15, 05:12
I see the following possible problems:
At both sides: tcpdump might not be able to record all packets (disk I/O) and thus it drops some of them.
At the receiver side: There could be packet loss in the network (normal for every network) and thus you see less frames on the receiver side than on the sender side.
answered 09 Jul '15, 22:29
Kurt Knochner ♦