Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Networking
User Name
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.


  Search this Thread
Old 12-19-2012, 04:37 PM   #1
LQ Newbie
Registered: Dec 2012
Posts: 2

Rep: Reputation: Disabled
e1000 driver on Centos only sees TCP traffic in one direction from HP SPAN

Apologies for the lack of detail here but off site at the moment.

We've setup a SPAN port on a HP switch (HP5406zl) to monitor traffic in both directions to and from a server.

Plugged in a Windows laptop, captured a pcap file, analysed it using wireshark and see traffic in BOTH directions.

Plug in a PC running Centos to the same SPAN port with the same config, e1000 driver, do a tcpdump, ONLY see TCP traffic SENT to the server, not traffic originating from the server.

I CAN see ARP and UDP traffic originating from the server.

Not sure where to go from here, seems really unusual to me? I suspect a driver issue or bug ? Really appreciate any ideas.
Old 12-20-2012, 02:12 PM   #2
Senior Member
Registered: Apr 2009
Posts: 1,504

Rep: Reputation: 137Reputation: 137
The e1000 driver doesn't know UDP, ARP and TCP and only know Ethernet frame. The TCP/IP stack handle UDP, ARP and TCP traffic.
You can monitor traffic on server. The server configuration may be wrong, such as iptable.
Old 01-02-2013, 08:17 AM   #3
LQ Newbie
Registered: Dec 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
Looks like the problem was caused by some sort of 'auto negotiation' issue between the driver and the HP switch, basically the connection was set to half duplex rather than full for some reason, setting it manually resolved the problem.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How TCP Offload Engines scale up the TCP traffic bandwidth by up to 8x on existing Ethernet Ne LXer Syndicated Linux News 0 02-16-2012 10:01 PM
anaconda sees RAID devices (aic-94xx); installed CentOS sees individual drives JMCraig Linux - Hardware 0 01-31-2011 02:56 PM
Snort/Base reporting no traffic, Ntop not showing any TCP traffic. a2brute Linux - Security 1 08-10-2009 12:21 PM
Traffic shaping (limiting outgoing bandwidth of all TCP-traffic except FTP/HTTP) ffkodd Linux - Networking 3 10-25-2008 12:09 AM
Help with Intel e1000 driver berg4091 Slackware 11 11-17-2006 09:17 PM > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 03:27 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration