Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Nov 2015 13:28:50 -0600
From:      Christian Peron <csjp@sqrt.ca>
To:        elof2@sentor.se
Cc:        freebsd-net <freebsd-net@FreeBSD.org>
Subject:   Re: netstat -B "Recv" 
Message-ID:  <04EF5880-800D-4A52-8CD1-DAF87EB6E37A@sqrt.ca>
In-Reply-To: <alpine.BSF.2.00.1511041736240.49057@farmermaggot.shire.sentor.se>
References:  <alpine.BSF.2.00.1511041736240.49057@farmermaggot.shire.sentor.se>

next in thread | previous in thread | raw e-mail | index | archive | help

Your assumptions are correct, recv count is the number of packets which are received by the bpf peer, match count is the number of packets which matched the bpf filter that is active.. this shouldn’t be happening. Are you running netstat during the tcpreplay run or after it completed? Also can you give me more information on what specifically mon0 is?


> On Nov 4, 2015, at 10:44 AM, elof2@sentor.se wrote:
> 
> 
> Hi!
> 
> Question:
> What do the Recv column in 'netstat -B' show?
> 
> I thought it was tha amount of packets received, but appaently not so.
> 
> I send 2000000 packets from a tcpreplay machine to a receiving machine.
> I do it a few times.
> 
> On the receiver I see:
> netstat -in
> Name    Mtu Network       Address              Ipkts Ierrs Idrop    Opkts Oerrs  Coll
> ix0    1500 <Link#1>      0c:c4:7a:58:e2:3c        0     0     0        0 0     0
> ix1    1500 <Link#2>      0c:c4:7a:58:e2:3d  6000000     0     0        0 0     0
> 
> and then
> netstat -in
> Name    Mtu Network       Address              Ipkts Ierrs Idrop    Opkts Oerrs  Coll
> ix0    1500 <Link#1>      0c:c4:7a:58:e2:3c        0     0     0        0 0     0
> ix1    1500 <Link#2>      0c:c4:7a:58:e2:3d  8000000     0     0        0 0     0
> 
> So 6000000 has increased to 8000000. Good.
> 
> 
> However, 'netstat -B' show:
>  Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
> 25553   mon0 p--s---   1996862         0   2000000     0     0 tcpdump
> 
> How can the "Recv" be *lower* than "Match"?
> 1996862 < 2000000.
> 
> 
> For every new run (fast and slow) I get the same results, slightly less than 2000000 Recv.
> 
> What am I missing?
> 
> /Elof
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?04EF5880-800D-4A52-8CD1-DAF87EB6E37A>