Jitter and intrapacket delay

Mon Jul 16 17:19:54 EDT 2007

Hey Urtho,
Ooops, emails went out in the wrong order!!!!
I did find a problem with argus() that could have caused the behavior  
you
were seeing.  I have now uploaded a new argus-3.0.0.tar.gz for you to
try out, and if you are having problems after this, please try the  
directions
below.

Carter

On Jul 16, 2007, at 5:16 PM, Carter Bullard wrote:

> You should try a few possibilities.
> First, generate a capture file of packets that you can use as a  
> standard packet source.
> Remove any /etc/argus.conf file that may be on your system.
> Run argus against the file, to generate a standard argus data set.
> Then test your clients to see if you can get any kind of jitter data.
>
> You should be running argus-3.0.0 and argus-clients-3.0.0.rc.45 or  
> higher.
>
> run:
>     argus -J -r packet.file -w argus.out
>     ra -s sintpkt dintpkt -r argus.out
>
> if this doesn't generate any values of any kind, then I'd have to  
> get into
> gdb and try to find out what is missing in your situation.
> The jitter data is calculated in a routine called ArgusTallyStats 
> ().  You
> can break there, to see what is being calculated, if anything.
> In ra(), the routine that parses the data and generates the data  
> elements
> is ArgusGenerateRecordStruct(), here you can break to see if its  
> actually
> parsing the data from the stream.
>
> Carter
>
>
>
>
> On Jul 15, 2007, at 2:41 PM, Urtho wrote:
>
>>
>> On 2007-07-13, at 18:58, Carter Bullard wrote:
>>
>>> If there is more than one packet in the flow, you should have  
>>> some information,
>>> but what is most curious, is that you have no other traffic.  Do  
>>> you not have any
>>> flows of any protocol type that have any interpacket arrival time?
>>>
>> unfortunately there is no single flow with *intpkt or *jit field :(
>>
>>> If not, then we all would assume that its not configure properly.
>>> Carter
>>>
>> I checked my config trice and did command line collection and  
>> tried different streams and all that before posting on the group :)
>>
>> There must me something fundamentally wrong with my setups (3  
>> different servers with CentOS 4.4 or 5.0)  - wrong compile  
>> options, wrong approach to collecting etc.
>>
>> ra -c'|' -r argus.out -s +dintpkt +sintpkt +djit +sjit +dloss +dur  
>> |egrep "tcp|icmp" |grep -v "rtcp"
>>
>> 13:54:58.505537| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|102|0|URP|||||0|0.000000
>> 14:54:19.085895| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|102|0|URP|||||0|0.000000
>> 13:28:36.008452| e       |icmp|193.192.170.34||->|83.15.159.92||6| 
>> 0|612|0|URP|||||0|0.116956
>> 13:30:36.756051| e       |icmp|193.192.170.34||->|83.15.159.92||3| 
>> 0|378|0|URP|||||0|10.000294
>> 13:30:46.754889| e       |icmp|193.192.170.34||->|83.15.159.92||5| 
>> 0|492|0|URP|||||0|0.089195
>> 13:37:41.763444| e       |icmp|193.192.170.34||->|83.15.159.92||12| 
>> 0|1512|0|URP|||||0|55.001011
>> 13:38:37.043853| e       |icmp|193.192.170.34||->|83.15.159.92||2| 
>> 0|168|0|URP|||||0|0.097524
>> 16:01:54.776978| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|102|0|URP|||||0|0.000000
>> 17:10:57.327255| e       |tcp|10.2.250.12|52027|->|193.192.170.34| 
>> telnet|86|87|5214|12282|CON|||||0|7.295213
>> 17:10:57.327732| e       |tcp|83.15.159.92|10034|->|193.192.170.34| 
>> telnet|86|87|5214|12282|CON|||||0|7.295141
>> 17:12:04.447058| e d     |tcp|10.2.250.12|52027|->|193.192.170.34| 
>> telnet|41|41|2460|6170|CON|||||1|6.042712
>> 17:12:04.447433| e d     |tcp|83.15.159.92|10034|->|193.192.170.34| 
>> telnet|41|41|2460|6170|CON|||||1|6.042673
>> 17:19:40.909536| e       |tcp|10.2.250.12|52027|<?>|193.192.170.34| 
>> telnet|2|2|120|120|FIN|||||0|0.009649
>> 17:19:40.909871| e       |tcp|83.15.159.92|10034|<?>| 
>> 193.192.170.34|telnet|2|2|120|120|FIN|||||0|0.009645
>> 11:41:51.275639| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|126|0|URP|||||0|0.000000
>> 16:17:33.736102| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|84|0|URP|||||0|0.000000
>> 10:28:14.569129| e d     |tcp|10.2.250.8|62831|->|193.192.170.34| 
>> telnet|68|69|4134|11178|CON|||||1|9.604955
>> 10:28:14.569621| e d     |tcp|83.15.159.92|8846|->|193.192.170.34| 
>> telnet|68|69|4134|11178|CON|||||1|9.604841
>> 10:30:05.879013| e d     |tcp|10.2.250.8|62831|<?>|193.192.170.34| 
>> telnet|70|69|4207|4533|CON|||||2|28.850334
>> 10:30:05.879385| e d     |tcp|83.15.159.92|8846|<?>|193.192.170.34| 
>> telnet|70|69|4207|4533|CON|||||2|28.850407
>> 10:31:14.994260| e       |tcp|10.2.250.8|62831|<?>|193.192.170.34| 
>> telnet|5|5|316|340|CON|||||0|1.958168
>> 10:31:14.994629| e       |tcp|83.15.159.92|8846|<?>|193.192.170.34| 
>> telnet|5|5|316|340|CON|||||0|1.958220
>> 10:32:21.346410| e d     |tcp|10.2.250.8|62831|<?>|193.192.170.34| 
>> telnet|96|94|5767|7604|CON|||||3|58.244102
>> 10:32:21.346756| e d     |tcp|83.15.159.92|8846|<?>|193.192.170.34| 
>> telnet|96|94|5767|7604|CON|||||3|58.244045
>> 10:33:21.424955| e d     |tcp|10.2.250.8|62831|<?>|193.192.170.34| 
>> telnet|15|15|900|1397|CON|||||1|0.941741
>> 10:33:21.425323| e d     |tcp|83.15.159.92|8846|<?>|193.192.170.34| 
>> telnet|15|15|900|1397|CON|||||1|0.941778
>> 10:35:16.350768| e       |tcp|10.2.250.8|62831|<?>|193.192.170.34| 
>> telnet|67|66|4020|4055|FIN|||||0|11.373601
>> 10:35:16.351098| e       |tcp|83.15.159.92|8846|<?>|193.192.170.34| 
>> telnet|67|66|4020|4055|FIN|||||0|11.372969
>> 11:24:58.356550| e d     |tcp|10.2.250.8|62867|->|193.192.170.34| 
>> telnet|108|109|6534|13624|CON|||||1|19.363277
>> 11:24:58.357185| e r     |tcp|83.15.159.92|11436|->|193.192.170.34| 
>> telnet|108|109|6534|13624|CON|||||0|19.363029
>> 11:26:51.479550| e d     |tcp|10.2.250.8|62867|<?>|193.192.170.34| 
>> telnet|108|105|6488|6663|CON|||||5|26.181408
>> 11:26:51.479998| e d     |tcp|83.15.159.92|11436|<?>| 
>> 193.192.170.34|telnet|108|105|6488|6663|CON|||||5|26.181293
>> 11:57:16.985371| e       |tcp|193.192.170.34|telnet|<?>| 
>> 83.15.159.92|11436|4|4|270|240|FIN|||||0|1.306283
>> 11:57:17.027304| e       |tcp|193.192.170.34|telnet|<?>|10.2.250.8| 
>> 62867|4|4|270|240|FIN|||||0|1.349387
>> 12:02:19.213665| e       |tcp|10.2.250.8|62887|->|193.192.170.34| 
>> telnet|125|122|7615|9278|CON|||||0|51.074928
>> 12:02:19.214161| e d     |tcp|83.15.159.92|13653|->|193.192.170.34| 
>> telnet|125|125|7615|9462|CON|||||1|51.074738
>> 12:03:29.327474| e d     |tcp|10.2.250.8|62887|->|193.192.170.34| 
>> telnet|203|205|12225|25078|CON|||||9|59.979507
>> 12:03:29.328203| e d     |tcp|83.15.159.92|13653|->|193.192.170.34| 
>> telnet|203|214|12225|25666|CON|||||7|59.979073
>> 12:04:43.117403| e d     |tcp|10.2.250.8|62887|->|193.192.170.34| 
>> telnet|173|171|10380|12281|FIN|||||6|28.877928
>> 12:04:43.117756| e d     |tcp|83.15.159.92|13653|->|193.192.170.34| 
>> telnet|173|178|10380|12810|FIN|||||6|28.830721
>> 12:50:47.635448| e       |icmp|193.192.170.34||->|83.15.159.92||7| 
>> 0|882|0|URP|||||0|29.980259
>> 12:51:20.162492| e       |icmp|193.192.170.34||->|83.15.159.92||2| 
>> 0|168|0|URP|||||0|0.030544
>> 13:10:17.673536| e       |icmp|193.192.170.34||->|83.15.159.92||1| 
>> 0|126|0|URP|||||0|0.000000
>> 14:43:23.903081| e       |icmp|193.192.170.34||->|83.15.159.92||2| 
>> 0|252|0|URP|||||0|4.999924
>> 13:13:54.756540| e d     |tcp|10.1.250.1|49907|->|193.192.170.34| 
>> telnet|94|94|5694|9150|CON|||||3|13.594941
>> 13:13:54.757025| e d     |tcp|83.15.159.92|14676|->|193.192.170.34| 
>> telnet|94|94|5694|9150|CON|||||3|13.595067
>> 13:44:07.864286| e       |tcp|193.192.170.34|telnet|<?>| 
>> 83.15.159.92|14676|2|2|150|120|RST|||||0|0.001246
>> 15:22:48.429800| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|7|0|452|0|FIN|||||0|31.191231
>> 15:23:51.626698| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:24:55.638339| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:25:59.652210| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:27:03.665365| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:28:07.678051| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:29:11.690994| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:30:15.704191| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|70|0|FIN|||||0|0.000000
>> 15:31:19.717389| e       |tcp|10.1.250.1|49907|?>|193.192.170.34| 
>> telnet|1|0|60|0|RST|||||0|0.000000
>>
>>
>
> Carter Bullard
> CEO/President
> QoSient, LLC
> 150 E. 57th Street Suite 12D
> New York, New York 10022
>
> +1 212 588-9133 Phone
> +1 212 588-9134 Fax
>
>

Carter Bullard
CEO/President
QoSient, LLC
150 E. 57th Street Suite 12D
New York, New York 10022

+1 212 588-9133 Phone
+1 212 588-9134 Fax

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20070716/571f3f01/attachment.html>