James,<div><br></div><div>Which card do you use, we have some experience with the latest 10G DAGs and how to massage it, to get the best throughput. Also, are you capturing headers or full packets, if its full packets you want to make sure you size your DAG buffers correctly, the ones you setup when you load the module.</div>
<div><br></div><div>thanks,<br clear="all">-srinivas<br><br>
<br><br><div class="gmail_quote">On Thu, Apr 12, 2012 at 9:38 AM, James Grace <span dir="ltr"><<a href="mailto:jgrac002@fiu.edu">jgrac002@fiu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Thanks Stephen,<div><br></div><div>I'll try that out.</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>James</div></font></span><div class="HOEnZb"><div class="h5"><div><br><br><div class="gmail_quote">
On Wed, Apr 11, 2012 at 5:46 PM, Stephen Donnelly <span dir="ltr"><<a href="mailto:Stephen.Donnelly@endace.com" target="_blank">Stephen.Donnelly@endace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-NZ" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Sounds like it could be a problem with either the application or the card.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Is the card still seeing packets? Run dagconfig -Ci while coral is still running and see if the counters are incrementing. Is the card dropping packets (e.g.
application is not consuming them)? Run dagconfig a few times and see if the stream drop counters are incrementing.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Try capturing with a different application for a while and confirm that the card continues working for more than 10 minutes, e.g. dagbits -d0 -c, or tcpdump
-v -i dag0 -w /dev/null<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I’m not that familiar with the specific tools, but the CAIDA folks may be able to help. It could be that the packet rate on the 10G link is too much?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Stephen.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:coral-dev-bounces@caida.org" target="_blank">coral-dev-bounces@caida.org</a> [mailto:<a href="mailto:coral-dev-bounces@caida.org" target="_blank">coral-dev-bounces@caida.org</a>]
<b>On Behalf Of </b>James Grace<br>
<b>Sent:</b> Thursday, 12 April 2012 1:06 a.m.<br>
<b>To:</b> <a href="mailto:coral-dev@caida.org" target="_blank">coral-dev@caida.org</a><br>
<b>Cc:</b> Julio Ibarra<br>
<b>Subject:</b> [Coral-dev] crl_anf and crl_flow stall after 10 minutes<u></u><u></u></span></p><div><div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-left:36.0pt">Good Morning,<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">I've encountered a problem when using either crl_flow or crl_anf on a Dag8.1SX with DAG 4.2.1 on a 10GigE link. After about 10 minutes of collecting, both applications just stall. The operating system still
sees them as active and they are still utilizing the processor, but they are not generating and sort of output. I've tried debug=2 to see if any useful information was generated from the application, but I didn't get anything. Has this been an issue for
anyone else?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">James Grace<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">Network Engineer<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">AMPATH / CIARA<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">Florida International University <u></u><u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
Coral-dev mailing list<br>
<a href="mailto:Coral-dev@caida.org">Coral-dev@caida.org</a><br>
<a href="https://rommie.caida.org/mailman/listinfo/coral-dev" target="_blank">https://rommie.caida.org/mailman/listinfo/coral-dev</a><br>
<br></blockquote></div><br></div>