Using PCAP to test integrity of application

[Alan Hermann]

Hello.

I want to test the integrity of an application that logs netflow for a sequence of traffic at high speeds.

I would like to send a PCAP, but at a specific rate provided by defining packets per second.

The idea is that I send lots of "normal" traffic at a very high rate, and then check if my application recorded the flowdata correctly but counting the various flows.

Currently I have found that I can either:

1) Add a stream to the client from a PCAP, which will only re-send the very first entry in the PCAP over and over again. this won't allow for very good tests, since the traffic isn't "normal" network traffic.

2) Use push_pcap(), which doesn't allow me to specify the rate (PPS), which means I cannot stress-test my application.

Any suggestions?

[hanoh haim]

Hi, 

You can use ASTF mode to simulate clients and applications. STL is more for stateless 

Thanks

Hanoh

[Alan Hermann]

I see. So the STL client has a push_pcap(), but can only push the first entry in the PCAP, and the ASTF client doesn't have a push_pcap()?

Does this mean that in order to send a sequence of normal data and then count to see if I am getting the expected number of flow records,

I will have to use ASTF and manually create streams that I want to use?

[hanoh haim]

Hi Alan, 

STL push_pcap convert the pcap to streams and replay them (not just the first packet). With ASTF you can convert the pcap to a template and then replicate it across number of clients and servers as there is a flow,client, server context 

I think you will find ASTF most suitable for your need. 

Thanks

Hanoh

[Alan Hermann]

Thank you, I will give ASTF a try. Is it possible to specify PPS when using ASTF and a template? Because I need to stress-test my application.

[hanoh haim]

Yes, you indirectly specify CPS 

--
You received this message because you are subscribed to the Google Groups "TRex Traffic Generator" group.
To unsubscribe from this group and stop receiving emails from it, send an email to trex-tgn+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/trex-tgn/6a7616d4-c8cd-4522-a6bd-a14ea3e0753cn%40googlegroups.com.

--

Hanoh

Sent from my iPhone

[Alan Hermann]

I have rewritten my tests for ASTF now, but when I try to run it, it says that: Only one session is allowed in a file. Packet 3 is from a different session.

Does this mean that I can't send "normal network traffic" as would be captured on e.g. a router/firewall in a busy network?

[Besart Dollma]

ASTF is simulating a Client Server architecture and changing the IP addresses based on this type of traffic only. So yes, it expects traffic only from one session.

[Alan Hermann]

Since I am only interested in flow data, I think maybe using stateless mode would be easier. That way I can easily control PPS. I'm not sure that there's anything from ASTF that I actually need for stress-testing how much flow data my application is able to record.