Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

IP fragments problem

0 views
Skip to first unread message

Fabio Previato

unread,
Nov 20, 1995, 3:00:00 AM11/20/95
to

Bytecounters,

I'm using NNStat3.3b and I have a problem with IP fragments.
The program don't parse any field for packets that are IP datagram fragment.

In fact with this sample parm file :

attach {

#--------------------------------------------------------------------------
# Ether Traffic
#--------------------------------------------------------------------------
record Ether.type in GLOBE freq-all-bytes;
record IP.protocol in IP.proto freq-all-bytes;
record IP.offset in IPOff freq-all-bytes;

if ( (Ether.src is cisco.GW-Ether eqf("cisco-math")) or
(Ether.dst is cisco.GW-Ether eqf("cisco-math")) )
{ # NON LOCAL TRAFFIC
record Ether.type in NOLCE freq-all-bytes;
record IP.offset in NOLOC-IPOff freq-all-bytes;
record IP.protocol in NOLOC-IP.proto freq-all-bytes;
#-------------------------------------------------------------------------
# IP Fragment
#--------------------------------------------------------------------------

} # end of non local traffic

#############################################################################
# LOCAL TRAFFIC
#############################################################################
else
{ # LOCAL TRAFFIC
record Ether.type in LOCE freq-all-bytes;
record IP.offset in LOC-IPOff freq-all-bytes;
record IP.protocol in LOC-IP.proto freq-all-bytes;
}

} # Attach end
--------------------------------------------------------------------------------
I have :

GLOBE = NOLCE + LOCE + IPOff
^^^^^
IP.proto = LOC-IP.proto + NOLOC-IP.proto
LOC-IPOff = 0;
NOLOC-IPOff = 0;

I understand IP.protocol miscount, but no Ether.type.
Can someone help me ?
Tanks.

0 new messages