[c-nsp] Many "Total output drops", no congestion

Victor Sudakov vas at mpeks.tomsk.su
Mon Oct 5 07:46:25 EDT 2015


Luke Flemington wrote:
> > I have a 600Mb tcpdump of mirrored traffic from that port, is
> > there a way to identify microbursts in Wireshark?
> 
> Yes, do a search for something like ???microburst wireshark??? and you???ll get a few results.
> 
> http://timraphael.com/2015/02/13/investigating-micro-bursting/
> http://notalwaysthenetwork.com/2014/01/06/microburst-detection-with-wireshark/

Thank you, Luke, very useful.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru


More information about the cisco-nsp mailing list