Re: tcptrace-bugs data extraction with missing tcp segments (silent failure)

From: mukesh agrawal (mukesh@cs.cmu.edu)
Date: 02/27/04


Date: Fri, 27 Feb 2004 12:17:26 -0500 (EST)
From: mukesh agrawal <mukesh@cs.cmu.edu>
Subject: Re: tcptrace-bugs data extraction with missing tcp segments (silent failure) 
Message-ID: <Pine.LNX.4.44.0402271215440.1054-100000@slash.mukesh.agrawals.org>

On Fri, 27 Feb 2004, Shawn Ostermann wrote:

> <#part sign=pgpmime>
>
> Well, it does tell you something, but not as a warning. Since it
> happens so frequently, it didn't seem wise to generate hundreds of
> warnings for it.
>
> There's a 'missed data' column in the long output (-l) that tells you
> how much data from segments wasn't seen.

Right. This was how I eventually figured out what was wrong.

> There's also a 'truncated data' column that tells you how much data was
> lost because the segments were truncated (short 'snap length').
>
> I suppose that a final 'WARNING: some extracted files are incomplete'
> message would be helpful, though.

Yes, this is what I'm looking for.

Thanks.



This archive was generated by hypermail 2.1.7 : 02/28/04 EST