Packet loss computation in non-ESP flows

[Carter Bullard]

Ooops,
   If your looking for the implementation,
its in Argus_tcp.c, Argus_esp.c and Argus_app.c.
Look for keywords like retrans, lost, and drop.

Carter

Carter Bullard
QoSient, LLC
300 E. 56th Street, Suite 18K
New York, New York  10022

carter at qosient.com
Phone +1 212 588-9133
Fax   +1 212 588-9134
http://qosient.com


> -----Original Message-----
> From: Shilpa Bansod [mailto:shilpa at mtu.edu] 
> Sent: Tuesday, October 02, 2001 7:41 PM
> To: Carter Bullard
> Cc: argus-info at lists.andrew.cmu.edu
> Subject: RE: Packet loss computation in non-ESP flows
> 
> 
> Hi all,
> I cannot seem to find the code that actually computes packet 
> loss. Any pointers would be appreciated. I understand that 
> the code might be spread across files, hence any keywords 
> would do too!
> 
> Thanks,
> -Shilpa
> 
> On Mon, 1 Oct 2001, Carter Bullard wrote:
> 
> > Hey Shilpa,
> >    Well, there are three basic mechanisms that argus
> > uses to report on packet loss/retransmission.  The
> > first is that argus has a complete TCP state machine
> > and is using that to determine drops and retransmitted 
> packets.  The 
> > second is to track monotonically increasing sequence 
> numbers when they 
> > exist.  Argus does this with ESP and RTP flows.  And the third
> > scheme is to enforce symmetric reporting for strict
> > request/response protocols, so Argus, when run using
> > the -R option (response mode), Argus generates data
> > that allows for easy calculation of packets lost.
> > This mode allows for you to calculate drops for ICMP
> > echo, traceroute, dns, ntp, portmapper, netbios, etc ...
> > 
> > Carter
> > 
> > Carter Bullard
> > QoSient, LLC
> > 300 E. 56th Street, Suite 18K
> > New York, New York  10022
> > 
> > carter at qosient.com
> > Phone +1 212 588-9133
> > Fax   +1 212 588-9134
> > http://qosient.com
> > 
> > > -----Original Message-----
> > > From: owner-argus-info at lists.andrew.cmu.edu
> > > [mailto:owner-argus-info at lists.andrew.cmu.edu] On Behalf Of 
> > > Shilpa Bansod
> > > Sent: Monday, October 01, 2001 1:42 PM
> > > To: argus-info at lists.andrew.cmu.edu
> > > Subject: Packet loss computation in non-ESP flows
> > > 
> > > 
> > > Hi all,
> > > I have been trying to figure out how Argus computes packet
> > > loss rate in
> > > non-ESP flows but have not been able to do so as yet. I 
> would greatly
> > > appreciate any insight into this. 
> > > 
> > > Thanks!
> > > -Shilpa
> > > 
> > > 
> > 
> 
>