LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 12-19-2012, 05:37 PM   #1
jbros
LQ Newbie
 
Registered: Dec 2012
Posts: 2

Rep: Reputation: Disabled
e1000 driver on Centos only sees TCP traffic in one direction from HP SPAN


Apologies for the lack of detail here but off site at the moment.

We've setup a SPAN port on a HP switch (HP5406zl) to monitor traffic in both directions to and from a server.

Plugged in a Windows laptop, captured a pcap file, analysed it using wireshark and see traffic in BOTH directions.

Plug in a PC running Centos to the same SPAN port with the same config, e1000 driver, do a tcpdump, ONLY see TCP traffic SENT to the server, not traffic originating from the server.

I CAN see ARP and UDP traffic originating from the server.

Not sure where to go from here, seems really unusual to me? I suspect a driver issue or bug ? Really appreciate any ideas.
 
Old 12-20-2012, 03:12 PM   #2
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,047

Rep: Reputation: 87
The e1000 driver doesn't know UDP, ARP and TCP and only know Ethernet frame. The TCP/IP stack handle UDP, ARP and TCP traffic.
You can monitor traffic on server. The server configuration may be wrong, such as iptable.
 
Old 01-02-2013, 09:17 AM   #3
jbros
LQ Newbie
 
Registered: Dec 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
Looks like the problem was caused by some sort of 'auto negotiation' issue between the driver and the HP switch, basically the connection was set to half duplex rather than full for some reason, setting it manually resolved the problem.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How TCP Offload Engines scale up the TCP traffic bandwidth by up to 8x on existing Ethernet Ne LXer Syndicated Linux News 0 02-16-2012 11:01 PM
anaconda sees RAID devices (aic-94xx); installed CentOS sees individual drives JMCraig Linux - Hardware 0 01-31-2011 03:56 PM
Snort/Base reporting no traffic, Ntop not showing any TCP traffic. a2brute Linux - Security 1 08-10-2009 01:21 PM
Traffic shaping (limiting outgoing bandwidth of all TCP-traffic except FTP/HTTP) ffkodd Linux - Networking 3 10-25-2008 01:09 AM
Help with Intel e1000 driver berg4091 Slackware 11 11-17-2006 10:17 PM


All times are GMT -5. The time now is 03:30 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration