fmadio / pcap2json

High Speed PCAP to JSON conversion utility
Other
97 stars 21 forks source link

TCP re-transmission stats #13

Open fmadio opened 5 years ago

fmadio commented 5 years ago

Need to work out a way to calculate some TCP re-transmission stats . its problem because all worker threads run in-dependently

fmadio commented 5 years ago

SACK counter might be a good proxy for retransmissions https://github.com/fmadio/pcap2json/commit/0bed656642fafbc7d3c9bd060d6c3c972a21de8c

Its a problem because of the wide parallel execution and exact TCP gap detection requires full serialization. Serialization burden the processing overhead.

See how it looks for production traffic