[quagga-users 13595] Re: Input packet and dropped packet

Mohammad Reza Razian razian.mr at gmail.com
Thu Feb 27 15:36:15 GMT 2014


Thanks Francisco,
If I enable netflow as you've said, Will be logged dropped packets (because
of congestion and not because of match to special rule) in forwarding
queue? (I know that we can log all incoming packet).
Regards M. R. Razian


On Thu, Feb 27, 2014 at 12:32 AM, Francisco Rivas <frivas at lanparty.cl>wrote:

>  Hi Mohammad,
>
> look at this:
>
> http://mbrownnyc.wordpress.com/2011/12/06/implement-netflow-on-centos/
>
> if you need, you can change the rules that matches all the packets (
> iptables -A INPUT -j NETFLOW ; iptables -A OUTPUT -j NETFLOW ; iptables -A
> FORWARD -j NETFLOW ) for more specific rules that matches your special
> queue. To record the actual packets, you'll need wireshark as Stephen said.
> Netflow is used for logging and accounting, wireshark is used to actually
> intercept (and decode if available!) the packets and record them to a file.
>
> Also check http://www.pmacct.net/ , it may fit your need too...
>
> regards!
>
> Francisco.
>
>
>
> On 02/26/2014 05:53 PM, Mohammad Reza Razian wrote:
>
>  Thanks for your guidance,
>  In fact I need to record packets which are dropped in a special output
> queue (because of filling queue) in each moment. Beside of it, I need to
> record packets which are inside of output queue in each moment. What should
> I do?
>
>  Regards M. R. Razian
>
>
> On Wed, Feb 26, 2014 at 11:29 PM, Francisco Rivas <frivas at lanparty.cl>wrote:
>
>>  Mohammad,
>>
>> Probably you will need Netflow (
>> http://sourceforge.net/projects/ipt-netflow/), because you'll log the
>> traffic at the forwarding engine (in this case, your linux server) and not
>> at the routing engine (Quagga).
>> You don't need to modify anything on Quagga.... just install/enable
>> netflow on Linux and you'll have the data needed.
>> I've done this many years ago and worked like a charm :)
>>
>> regards
>>
>>
>> Francisco.
>>
>>
>>
>>
>> On 02/26/2014 04:38 PM, Stephen Hirsch wrote:
>>
>>   I would have thought what you are looking for is something like
>> Wireshark (www.wireshark.org).
>>
>>
>>
>> Stephen
>>
>> *From:* Mohammad Reza Razian [mailto:razian.mr at gmail.com<razian.mr at gmail.com>]
>>
>> *Sent:* Wednesday, 26 February 2014 7:12 p.m.
>> *To:* quagga-users at lists.quagga.net
>> *Subject:* [quagga-users 13586] Input packet and dropped packet
>>
>>
>>
>> Hi,
>> I need to record all packets that are entered to my quagga router (I want
>> to construct a flow table and update it real time. A flow is defined as
>> src. IP and dst. IP). Then I want to count packet loss of each flow. But
>> really I don't know how change code of quagga to reach these goals!
>>
>> Regards M. R. Razian
>>
>> **********************************************************************
>> This electronic mail message together with any attachment is
>> confidential. If you are not the intended recipient then do not
>> disclose, copy or use the contents in any way, and please let us
>> know by return e-mail then destroy this message.
>> Any views expressed in this message are those of the individual
>> sender and may not necessarily reflect the views of Management.
>> We are not responsible for any changes made to this message and/or
>> any attachments after sending.
>> Thank you
>>
>> Scanned by the Clearswift SECURE Email Gateway.
>>
>> www.clearswift.com
>> **********************************************************************
>>
>>
>>   _______________________________________________
>> Quagga-users mailing listQuagga-users at lists.quagga.nethttps://lists.quagga.net/mailman/listinfo/quagga-users
>>
>>
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.quagga.net/pipermail/quagga-users/attachments/20140227/c3760106/attachment.html>


More information about the Quagga-users mailing list