Hi guys,
started using NDR, it is a super nice tool, great work.
Checking error-plugins, and we are using these by default:
allowed_errors = {'client': {u'tcps_conndrops': u'embryonic connections dropped',
u'tcps_rcvduppack': u'duplicate-only packets received',
u'tcps_rcvoobyte': u'out-of-order bytes received',
u'tcps_reasfree': u'free tcp reasembly ctx',
u'tcps_reasalloc': u'allocate tcp reasembly ctx',
u'tcps_rcvdupbyte': u'duplicate-only bytes received',
u'tcps_rcvoopack': u'out-of-order packets received'},
'server': {u'err_no_template': u"server can't match L7 template",
u'err_no_syn': u'server first flow packet with no SYN',
u'tcps_sndrexmitpack': u'data packets retransmitted',
u'tcps_sndrexmitbyte': u'data bytes retransmitted',
u'tcps_rcvdupack': u'rcvd duplicate acks'}
What does "out-of-order packets received", does it mean out-of-order packets in the same traffic-flow, or is it out of order in general between flows?
Is there a way to continue the traffic even if we get accepted errors?
Thanks,
/Robert L B