Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Nov 2015 13:28:50 -0600
From:      Christian Peron <csjp@sqrt.ca>
To:        elof2@sentor.se
Cc:        freebsd-net <freebsd-net@FreeBSD.org>
Subject:   Re: netstat -B "Recv" 
Message-ID:  <04EF5880-800D-4A52-8CD1-DAF87EB6E37A@sqrt.ca>
In-Reply-To: <alpine.BSF.2.00.1511041736240.49057@farmermaggot.shire.sentor.se>
References:  <alpine.BSF.2.00.1511041736240.49057@farmermaggot.shire.sentor.se>

next in thread | previous in thread | raw e-mail | index | archive | help
Your assumptions are correct, recv count is the number of packets which =
are received by the bpf peer, match count is the number of packets which =
matched the bpf filter that is active.. this shouldn=E2=80=99t be =
happening. Are you running netstat during the tcpreplay run or after it =
completed? Also can you give me more information on what specifically =
mon0 is?


> On Nov 4, 2015, at 10:44 AM, elof2@sentor.se wrote:
>=20
>=20
> Hi!
>=20
> Question:
> What do the Recv column in 'netstat -B' show?
>=20
> I thought it was tha amount of packets received, but appaently not so.
>=20
> I send 2000000 packets from a tcpreplay machine to a receiving =
machine.
> I do it a few times.
>=20
> On the receiver I see:
> netstat -in
> Name    Mtu Network       Address              Ipkts Ierrs Idrop    =
Opkts Oerrs  Coll
> ix0    1500 <Link#1>      0c:c4:7a:58:e2:3c        0     0     0       =
 0 0     0
> ix1    1500 <Link#2>      0c:c4:7a:58:e2:3d  6000000     0     0       =
 0 0     0
>=20
> and then
> netstat -in
> Name    Mtu Network       Address              Ipkts Ierrs Idrop    =
Opkts Oerrs  Coll
> ix0    1500 <Link#1>      0c:c4:7a:58:e2:3c        0     0     0       =
 0 0     0
> ix1    1500 <Link#2>      0c:c4:7a:58:e2:3d  8000000     0     0       =
 0 0     0
>=20
> So 6000000 has increased to 8000000. Good.
>=20
>=20
> However, 'netstat -B' show:
>  Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
> 25553   mon0 p--s---   1996862         0   2000000     0     0 tcpdump
>=20
> How can the "Recv" be *lower* than "Match"?
> 1996862 < 2000000.
>=20
>=20
> For every new run (fast and slow) I get the same results, slightly =
less than 2000000 Recv.
>=20
> What am I missing?
>=20
> /Elof
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?04EF5880-800D-4A52-8CD1-DAF87EB6E37A>