Please find the response inline:
________________________________ From: Holoo Gulakh <[email protected]> Sent: Tuesday, January 9, 2018 12:22 PM To: Mohsin Kazmi (sykazmi); [email protected] Subject: Re: [vpp-dev] packet capture there are labels like dpdk-input, ip4-input-no-checksum, ip4-icmp-echo-request and so on. As you know wireshark shows a single entry containing all information about a packet OR in other words wireshark captures packet at the physical layer. ============================================================================= Q1: Which of these labels in VPP act like wireshark?? [mohsin] dpdk-input, af-packet-input etc. Input graph nodes which receive frames, act like wireshark. Q2: How to filter packets base on that label?? I want just one entry per packet containing all packet's info [mohsin] you can just add single label which you know interested packet should come from. i.e. trace add af-packet-input 10 It will start tracing from af-packet-input and will report all the subsequent graph nodes which will process that received frame. ============================================================================= On Tue, Jan 9, 2018 at 2:41 PM, Mohsin Kazmi (sykazmi) <[email protected]<mailto:[email protected]>> wrote: Hello Holoo, You can find examples of traces in VPP Uses Cases. Specific to VPP packet tracing, please check the following link: https://wiki.fd.io/view/VPP/Command-line_Interface_(CLI)_Guide#packet_tracer Apart from that, debug CLI list down the commands: vpp# trace ? trace add Trace given number of packets trace filter filter trace output - include NODE COUNT | exclude NODE COUNT | none trace frame-queue trace frame-queue (on|off) vpp# I hope that it will help. -br Mohsin ________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of Holoo Gulakh <[email protected]<mailto:[email protected]>> Sent: Tuesday, January 9, 2018 11:58 AM To: [email protected]<mailto:[email protected]> Subject: [vpp-dev] packet capture Hi, In a typical scenario, we usually use wireshark or tcpdump to capture input/output packets from interfaces and we can use filters to filter them base on different criteria such as protocol. My question is that : when VPP handles one interface, then this interface is out of kernel's control so we can't capture those packets using wireshark or tcpdump. =============================================== What is an alternative in VPP for wireshark or tcpdump?? =============================================== I read somewhere that there is a command named "trace" in VPP. Is it correct?? if so, how to use it?? how to filter packets?? what is the representation format of packets?? how to filter them base on network stack layers?? I want to use this tool for debugging my scenarios which uses VPP as dataplane.
_______________________________________________ vpp-dev mailing list [email protected] https://lists.fd.io/mailman/listinfo/vpp-dev
