[Click] FromDump restart
Beyers Cronje
bcronje at gmail.com
Tue Nov 20 11:06:46 EST 2007
Hi Robert,
Running your config below and pcap file I get:
click conf/fromdump.click
First Offset: 24
1194550918.323930: 66 | 00180125 a9fb0017 3f525f52 08004500 0034829e 40003006
1194550918.384094: 54 | 00180125 a9fb0017 3f525f52 08004500 0028829f 40003006
1194550918.444360: 66 | 00180125 a9fb0017 3f525f52 08004500 003482a4 40003006
......
I'm running git version from a few weeks back. I wonder if it is
possible that your script element is getting initialized before your
FromDump element?
Beyers
On Nov 20, 2007 4:25 PM, Robert Ross <rross at dsci.com> wrote:
> I tried this and, as I said before, the position returned is "0":
>
> fd::FromDump(/tmp/foo.trace,
> TIMING true, FORCE_IP false, ACTIVE false, END_CALL
> restarter.step)
> -> Print(TIMESTAMP true) -> Discard;
>
> restarter::Script(init first_offset $(fd.filepos),
> print "First Offset: " $first_offset ,
> write fd.active true,
> pause,
> write fd.filepos $first_offset,
> write fd.reset_timing,
> loop)
>
>
> This prints:
>
> First Offset: 0
>
>
>
> Robert Ross
> DSCI Inc.
> Office: 732.542.3113 x173
> Home: 609.702.8114
> Cell: 609.509.5139
> Fax: 253.550.6198
>
> -----Original Message-----
> From: Eddie Kohler [mailto:kohler at cs.ucla.edu]
> Sent: Monday, November 19, 2007 1:38 PM
> To: Robert Ross
> Cc: click at amsterdam.lcs.mit.edu
> Subject: Re: [Click] FromDump restart
>
> I think you did not try this, because it should have worked, but who
> knows? I checked in an update so that TIMING and FORCE_IP are
> compatible, and added a "FromDump::reset_timing" handler so that you can
> reset timing information when looping back into the file.
>
> fd::FromDump(/tmp/foo.trace,
> TIMING true, FORCE_IP false, ACTIVE false, END_CALL
> restarter.step)
> -> Print(TIMESTAMP true) -> Discard;
>
> restarter::Script(init first_offset $(fd.filepos),
> write fd.active true,
> pause,
> write fd.filepos $first_offset,
> write fd.reset_timing,
> loop)
>
>
> Eddie
>
>
> Robert Ross wrote:
> >
> > I thought I had tried this already. When I tried it, fd.filepose
> > returned "0" as the starting position. The only difference I see is
> > that I did not use "FORCE_IP true" because need to use the "TIMING"
> > keyword. The two are apparently mutually exclusive.
> >
> > Robert Ross
> > DSCI Inc.
> > Office: 732.542.3113 x173
> > Home: 609.702.8114
> > Cell: 609.509.5139
> > Fax: 253.550.6198
> >
> > -----Original Message-----
> > From: Eddie Kohler [mailto:kohler at cs.ucla.edu]
> > Sent: Saturday, November 17, 2007 10:03 PM
> > To: Robert Ross
> > Cc: click at amsterdam.lcs.mit.edu
> > Subject: Re: [Click] FromDump restart
> >
> > Hi Robert,
> >
> > The problem with filepos is that filepos=0 is the pcap file header.
> > You need to set it to the first byte of actual packet data, which
> > might be
> > 24 or 28 depending on pcap version.
> >
> > This script works for me. It relies on the fact that FromDump skips
> > the header at initialization time, but does not actually read any
> > packets until ACTIVE is true.
> >
> >
> > fd::FromDump(~/src/ipsumdump/test/one-byte-payload.trace,
> > FORCE_IP true, ACTIVE false, END_CALL restarter.step)
> > -> IPPrint -> Discard;
> >
> > restarter::Script(init first_offset $(fd.filepos),
> > write fd.active true,
> > pause,
> > write fd.filepos $first_offset,
> > loop)
> >
> >
> > Eddie
> >
> >
> > Robert Ross wrote:
> >> I'm trying to use a Script element along with a FromDump to loop a
> > small PCAP file several times with a delay between replays. The
> > script basically works except for one critical element: I cannot seem
>
> > to reset the FromDump "filepos" handler to the beginning of the file.
>
> > As indicated in the documentation, the issue appears to be determining
>
> > the correct byte offset for the beginning of the first packet in the
> file.
> > I've tried the following with no luck:
> >>
> >> 1. Setting filepos=0. If only it were that simple...
> >> 2. Wait until the first packet has come out and "poke" the script
> > using a Counter element. Then use the script to calculate various
> > starting positions using a combination of read handlers from FromDump
> > and Counter.
> >>
> >> Some of the questions I have are:
> >>
> >> 1. Both packet_filepos and filepos provide byte offsets, but the
> > documentation does not adequately describe what these offsets
> represent.
> > Is packet_filepos the end point of the last packet read? The start
> > point of the last packet read? The start point of the next packet to
> > be read? Something else? What is the difference between filepos and
> > packet_filepos?
> >> 2. Is there another simpler way to loop a PCAP file that I'm
> missing?
> >> 3. Assuming I knew the correct offset, is it even possible to reset
> > the filepos and re-play the PCAP file again?
> >>
> >> As a general suggestion, added LOOP and LOOP_INTERVAL keywords to the
> > various dump elements could be extremely useful. In the absence of
> > those, at the very least a "restart" or "start_pos" handler would be
> > equally useful. I'm currently wondering why the "filepos" handler is
> > even writeable...
> >>
> >> Thanks,
> >> Robert A. Ross
> >> DSCI Inc.
> >> 609-509-5139
> >> _______________________________________________
> >> click mailing list
> >> click at amsterdam.lcs.mit.edu
> >> https://amsterdam.lcs.mit.edu/mailman/listinfo/click
>
> _______________________________________________
> click mailing list
> click at amsterdam.lcs.mit.edu
> https://amsterdam.lcs.mit.edu/mailman/listinfo/click
>
More information about the click
mailing list