Discussion:
about Packet loss in wireshark
nangergong
2010-12-16 15:17:10 UTC
Permalink
Hi, all:

I captured some packets in my experiment. Is it possible to randomly
discard some packets with a certain probability from the captured packets
using wireshark?

Besides, does anyone know the meaning of "minus packet loss" in wireshark,
as shown in the attached pktloss.jpg? Thank you!
Martin Visser
2010-12-16 21:52:14 UTC
Permalink
Wireshark only discards traffic on an interface on the basis for the capture
filters. There are no random discard filters (or other math-like ones that
would be suitable.

If I want to simulate a lossy network, I use the "netem" functionality built
into to the Linux kernel to good effect. (Basically you setup a Linux box as
a bridge and then use the "tc" commands to alter the traffic control
paramters of the interfaces.

Regards, Martin
Post by nangergong
I captured some packets in my experiment. Is it possible to randomly
discard some packets with a certain probability from the captured packets
using wireshark?
Besides, does anyone know the meaning of "minus packet loss" in
wireshark, as shown in the attached pktloss.jpg? Thank you!
___________________________________________________________________________
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
?subject=unsubscribe
nangergong
2010-12-16 22:53:42 UTC
Permalink
Thank you. What I want to do is to simulate packet losses by removing some
packets from my captured packets with a certain probability. Is there any
other method that can achieve this?
Post by Martin Visser
Wireshark only discards traffic on an interface on the basis for the
capture filters. There are no random discard filters (or other math-like
ones that would be suitable.
If I want to simulate a lossy network, I use the "netem" functionality
built into to the Linux kernel to good effect. (Basically you setup a Linux
box as a bridge and then use the "tc" commands to alter the traffic control
paramters of the interfaces.
Regards, Martin
Post by nangergong
I captured some packets in my experiment. Is it possible to randomly
discard some packets with a certain probability from the captured packets
using wireshark?
Besides, does anyone know the meaning of "minus packet loss" in
wireshark, as shown in the attached pktloss.jpg? Thank you!
___________________________________________________________________________
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
?subject=unsubscribe
___________________________________________________________________________
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
?subject=unsubscribe
Jaap Keuter
2010-12-17 07:32:44 UTC
Permalink
Hi,

What you can do is script editcap to leave out a random distribution of packets
from a base capture.

The negative packet loss percentage is probably the statistics going haywire
over code changes, loosing track of what sequence number begin, end and possibly
rollover has taken place.

Thanks,
Jaap
Post by nangergong
I captured some packets in my experiment. Is it possible to randomly
discard some packets with a certain probability from the captured
packets using wireshark?
Besides, does anyone know the meaning of "minus packet loss" in
wireshark, as shown in the attached pktloss.jpg? Thank you!
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users-IZ8446WsY0/***@public.gmane.org>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request-IZ8446WsY0/***@public.gmane.org?subject=unsubscribe
Continue reading on narkive:
Loading...