Does Netflow exported data give you enough info on it? What can you learn
from say, the TCP flags? Can the bytes or packets transferred in the flow
interval tell you if there is congestion in between, without someone having
to do and end-to-end ping?
from NANOG:
----- Forwarded message from Philippe Strauss <philou@safe-host.net> -----
well, it's the way icmp_echo is handeld in some vendor routers and
sometime also the poor implementation of an IP stack on the echoing
device which is a problem.
another mean to measure RTT and packet loss rate is to analyze
normal TCP traffic flowing between customers site and the internet.
using a software tracking each TCP connection, you could get
statistics like RTT and packet drop rate, on real world traffic.
you could look for the worst packet drop stats, weight it relative to
its statistical significance (higher the number of packet exchanged, better
the accuracy), sort this statistics, and look for destination network who
collect the worst packet drop rate (worst mean higher to me for packet drop).
Then walk in you BGP table, look for another path than the selected one, try
it, and compare the stats for this network, keeping this BGP tweaking
in case the situation imprioved sensibly.
This rise a big question: how a customer would perceive the fact
that the provider analyse traffic for performance improvement reasons?
the provider can ensure it's customer it wont use it to look into
the payload, and actually be honest about it.
Do you think customer will get mad about such an idea, or finally,
since the (colloc) provider as physical access to shared equipment
it would not change much the trust relationship needed btw the
prvider and its customer.
> Serve to learn, man.
-- Philippe Strauss, safehost saEn offrant aux regards trop de drame humain, la technologie nous a desensibilisés, tant sur notre propre souffrance que sur celle des autres.
----- End forwarded message -----
--
http://www.internet.org.ph The Philippine Internet Resource Mobile Voice/Messaging: +63-917-810-9728
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:29 EDT