Re: tcptrace TRAFFIC Module and Detailed Analysis - Dupacks

From: Jon (jon_webb@binary-one.com)
Date: 11/21/03


Message-ID: <3FBEBFB8.1090704@binary-one.com>
Date: Fri, 21 Nov 2003 17:45:28 -0800
From: Jon <jon_webb@binary-one.com>
Subject: Re: tcptrace TRAFFIC Module and Detailed Analysis - Dupacks

I dont know anything about the TRAFFIC module, but I would assume that
it's looking at one of the connections rather than cumulative.. on every
connection but one, you can see that the right side only has 1 dupack.
In either case, the detailed connection information should be reliable.
- Jon

Giovanni.Giambiasi@nokia.com wrote:

>Hi,
>
>I am testing performance of TCP over wireless. At the moment I am using Tcptrace version 6.2.0 for Windows.
>I have a couple of questions about the information regarding the amount of duplicated acks.
>If I analyse a dump file with the detailed analysis options (tcptrace -lr <dumpfile>) I can see the amount of dupacks for each TCP connection.
>If I use the TRAFFIC module on the same dump file (tcptrace -xtraffic <dumpfile>) I obtain rather different results.
>I attach two files: as you can see in the traffic_stats.dat files tcptrace tells me that 1 dupack was seen in the dumpfile, while analysing the detailed statistics there are much more dupacks than in the previous file).
>
>Could someone explain this behaviour?
>
>Thank you in advance.
>
>BR,
>
>Giovanni
>
>
>
>------------------------------------------------------------------------
>
>1 arg remaining, starting with 'anoukis_dack_6'
>Ostermann's tcptrace -- version 6.2.0 -- Fri Jul 26, 2002
>
>339 packets seen, 256 TCP packets traced
>elapsed wallclock time: 0:00:18.144999, 18 pkts/sec analyzed
>trace file elapsed time: 0:00:50.284961
>TCP connection info:
>6 TCP connections traced:
>TCP connection 1:
> host a: 10.200.192.104:1861
> host b: linux.sitadelle.com:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:06.848225 2003
> last packet: Wed Nov 19 18:36:15.404053 2003
> elapsed time: 0:00:08.555828
> total packets: 32
> filename: anoukis_dack_6
> a->b: b->a:
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 4
> duplicate acks: 15 duplicate acks: 1
> triple dupacks: 0 triple dupacks: 0
>================================
>TCP connection 2:
> host c: 10.200.192.104:1862
> host d: 15.15.15.3:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:10.091399 2003
> last packet: Wed Nov 19 18:36:14.626246 2003
> elapsed time: 0:00:04.534847
> total packets: 17
> filename: anoukis_dack_6
> c->d: d->c:
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 0
> duplicate acks: 6 duplicate acks: 1
> triple dupacks: 0 triple dupacks: 0
>================================
>TCP connection 3:
> host e: 10.200.192.104:1863
> host f: 15.15.15.5:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:10.178131 2003
> last packet: Wed Nov 19 18:36:15.784073 2003
> elapsed time: 0:00:05.605941
> total packets: 9
> filename: anoukis_dack_6
> e->f: f->e:
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 0
> duplicate acks: 2 duplicate acks: 1
> triple dupacks: 0 triple dupacks: 0
>================================
>TCP connection 4:
> host g: 10.200.192.104:1864
> host h: 15.15.15.5:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:12.153581 2003
> last packet: Wed Nov 19 18:36:20.130226 2003
> elapsed time: 0:00:07.976645
> total packets: 10
> filename: anoukis_dack_6
> g->h: h->g:
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 1
> duplicate acks: 3 duplicate acks: 1
> triple dupacks: 0 triple dupacks: 0
>================================
>TCP connection 5:
> host i: 10.200.192.104:1865
> host j: 15.15.15.2:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:12.178244 2003
> last packet: Wed Nov 19 18:36:47.830169 2003
> elapsed time: 0:00:35.651924
> total packets: 123
> filename: anoukis_dack_6
> i->j: j->i:
>
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 2
> duplicate acks: 59 duplicate acks: 11
> triple dupacks: 0 triple dupacks: 1
>================================
>TCP connection 6:
> host k: 10.200.192.104:1866
> host l: 15.15.15.2:80
> complete conn: no (SYNs: 2) (FINs: 0)
> first packet: Wed Nov 19 18:36:12.197875 2003
> last packet: Wed Nov 19 18:36:36.213405 2003
> elapsed time: 0:00:24.015529
> total packets: 65
> filename: anoukis_dack_6
> k->l: l->k:
>
> post-loss acks: 0 post-loss acks: 0
> segs cum acked: 0 segs cum acked: 0
> duplicate acks: 30 duplicate acks: 1
> triple dupacks: 0 triple dupacks: 0
>
>

----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.



This archive was generated by hypermail 2.1.7 : 11/22/03 EST