[SWLUG] Sniffing for dud packets
Foeh Mannay
foeh.mannay at ntlworld.com
Tue Jun 3 17:21:30 UTC 2003
Hi, all.
Sorry this isn't a strictly Linux question, and also for the preamble
rambling...
In the school where I work there is a 100 meg fibre link from the server room
off to a computer lab at the other end. I suspect it's had it in some way or
another since the network that spurs off it is very slow, and when I was
installing a fairly big app the other day loads of the machines were crashing
out (Wintendo for you) and giving unavailable resource messages, not to
mention being a load slower than elsewhere in the complex.
Anyway, I started doing some pings etc and noticed it was losing about 2 to 4%
when the network wasn't loaded very much, when I bumped up the packet size to
about 13k and did it with some traffic on the network it started dropping
more like 40% - I'm not sure if I'm being paranoid but that seems pretty dire
because 13k is one segment, and in any case you shouldn't just lose that much
stuff on a switched network, right?
I thought I might try sniffing some traffic but it didn't turn up an awful lot
(except a load of spanning tree spam from a cisco switch owned by county) but
I thought maybe it wouldn't since either the switch or the stack would be
dropping corrupt stuff before it got to my sniffer.
I could be wrong in any / all of these assumptions, but what I'm basically
asking is whether there are any apps I could use to check / diagnose a dud
fibre link? I stole a junk machine and sneakily installed BSD on it, so
that's happily within reach of the one end's media convertor... plus my
laptop will reach the other in a cab at the opposite end of school, so I can
run *nix on either end, just not sure what!
Any advice would be very welcome.
PS if anyone could shed light on this:
The networks guy said you can have a maximum of 2 devices (switches) between
any 2 PCs on 100 meg, any more and it won't work. I thought that was just
hubs, but I could be wrong.
Interestingly enough he's the guy that fitted the fibre link which goes:
server -> switch -> media conv -> media conv -> switch -> switch -> switch ->
PC
Not 100% certain the last switch is actually there, but there may be an extra
one at the start so for argument's sake we'll call it an average - that's
more than 2 switches between 2 computers!
Cheers chaps!
Foeh.
More information about the Swlug
mailing list