Re: polling



To find out if packet are being dropped the easiest way is to create a
script and poll netstat. Correlate the netstat info with a simple
monitor program to monitor UDP packets... netstat will tell you if
packets are being dropped at socket level whereas the monitor program
will tell you what packets are being received and to which ports at
data link level.

Of course if you already know which UDP port to monitor in advance you
dont need netstat.

To write the monitor program to monitor data link level packets (at
ethernet level for example) use WinPcap for windows, or libpcap for
unix/linux. You will have to do some programming though. At source code
level, you can mix socket programming with libpcap and winpcap calls.

hope this helps
Rene

Michael Schnell wrote:
If I can find if packets are being dropped at the specific port, my
purpose would be solved.

What do you mean by "packets being dropped at the specific port" ? If a
packet gets lost in the transport, the receiving port/machine sees
nothing of it and the sending port/machine never knows that it did not
reach the destination. So there is _no_ way to detect the loss. (Unless
a higher protocol is established that performs a handshake. But this is
not "UDP" but something that _uses_ UDP).

-Michael

.



Relevant Pages

  • RE: Detecting WAPs
    ... CTS packets.. ... Now...you could, theoritically, monitor the RTS and CTS packets. ... whether or not you have an AP on the network. ...
    (Security-Basics)
  • Re: Legality of WEP Cracking
    ... > I start Wireshark and capture all the packets I am seeing from the WAP. ... device that can monitor cell phone communications, ... This applies to all wifi transmissions, ...
    (Pen-Test)
  • Re: Bandwidth Monitor
    ... > - Roulette ... >>> I want to write a bandwidth monitor that will tally up how much data ... >> You can then process the packets to count how many bytes are being sent / ... >> then you can just process packets where Src or Dest IP is not on local ...
    (microsoft.public.win32.programmer.networks)
  • Re: How to start Ethereal capture at network usage threshold?
    ... To monitor bandwidth you must capture ALL packets on the network. ... If you want to monitor between certain times you may need to use Windows Task ...
    (microsoft.public.windows.server.networking)
  • Re: syslog server, RH ES 4, large amounts of UDP loss. please help
    ... 26 packets to unknown port received. ... Below I see no recieve errors, but netstat reports recieve ... stats are only looking at the Ethernet level errors in the stack. ... the higher levels on the receiving system stack are tripping over themselves. ...
    (comp.os.linux.networking)