Mailing List Archive

Mismatch in PFRING reported stats and application stats.
Hi,

Recently we had one weird observation, we have fixed set of pcap files.

We have an application using pf_ring to read packets from an interface.
Across multiple runs, packet count matches in PFRING stats(output of #cat
/proc/net/pf_ring/<pid>-<intface> | grep Packets) and in out applications.
But we have observed that in few of the runs, application is reporting more
number of packets than the one reported in PFRING stats.

Can you please help to understand - Is there any case in which PFRING can
send the packets more than once?

We are using PFRING 6.2.0.

Regards,
Gautam
Re: Mismatch in PFRING reported stats and application stats. [ In reply to ]
Hi Gautam
could you provide some output from /proc and the application?
Please also provide some information about the driver you are using.

Regards
Alfredo

> On 1 Nov 2016, at 06:39, Chandrika Gautam <chandrika.iitd.rock@gmail.com> wrote:
>
> Hi,
>
> Recently we had one weird observation, we have fixed set of pcap files.
>
> We have an application using pf_ring to read packets from an interface.
> Across multiple runs, packet count matches in PFRING stats(output of #cat /proc/net/pf_ring/<pid>-<intface> | grep Packets) and in out applications.
> But we have observed that in few of the runs, application is reporting more number of packets than the one reported in PFRING stats.
>
> Can you please help to understand - Is there any case in which PFRING can send the packets more than once?
>
> We are using PFRING 6.2.0.
>
> Regards,
> Gautam
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc