Hi, all!
I'd like to request some help about an issue I've come across:
* My scenario is basically traffic generator and a server, communicating by a proprietary application protocol that uses TCP.
* By using (t)ethereal, I'd like to capture the traffic in the generator for a further processing in order to extract some stats.
* The traffic model consist in the generator sending a request and the server answering. There are some types of messages and they're sent in the same ratio (more or less).
* One thing to consider is that one of the answers types handles messages of around 10k.
* As the MTU is 1500, segmentation appears in the path server->generator.
* The requests are never so large, so there would be no segmentation in the generator -> server path,.
Our problem is that when capturing , we're not able to see most of the answers. For instance, in one of our tests we captured around 10000 requests but only 2900 answers. Nevertheless the traffic works fine (we know that because our generating tool gives us some info about the results of the test and they were successfull). We have the feeling that maybe so much segmentation may lead things to a mess, but it is just a feeling. Nevertheless, the figures 10000 vs. 2900 are of such nature that we know we're "losing" messages of all kinds, not only of the "large" type.
If anybody has suffered this kind of stuff or knows what is going on, please, do not hesitate to answer.
Thanks a lot in advance
Jose