Difference between revisions of "Networking"
m (added network packet broker info) |
|||
| (27 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
== Networking == | |||
[https://www.opnfv.org/ Open Platform for NFV (OPNFV)] is a collaborative project under the Linux Foundation that is transforming global networks through open source Network Functions Virtualization (NFV) | |||
[https://osm.etsi.org/ OSM] is delivering an open source Management and Orchestration (MANO) stack aligned with ETSI NFV Information Models. As an community-led community, OSM offers a production-quality MANO stack that meets operators' requirements for commercial NFV deployments. | |||
ETSI, [https://www.etsi.org/technologies/nfv Home of NFV] and their short [https://www.youtube.com/watch?v=Q1Kzu2vyuqs video] explaining NFV. | |||
Wikipedia [https://en.wikipedia.org/wiki/Network_function_virtualization NFV] article | |||
=== Layer 2 Switching === | |||
[https://community.cisco.com/t5/networking-documents/understanding-span-rspan-and-erspan/ta-p/3144951 Understanding SPAN,RSPAN,and ERSPAN] | |||
== Network Packet Brokers == | |||
[https://community.fs.com/blog/network-packet-broker-vs-network-tap.html Network Packet Broker vs Network TAP] | |||
== TCP and IP == | |||
=== Excellent write up on basics of TCP === | |||
[https://accedian.com/enterprises/blog/diagnose-tcp-connection-setup-issues/ Diagnose TCP connection setup issues] | |||
=== TCP/IP .NET Sockets FAQ === | |||
Excellent write up on some [http://blog.stephencleary.com/2009/04/tcpip-net-sockets-faq.html TCP/IP information] by Stephen Cleary | |||
[http://blog.stephencleary.com/2009/05/detection-of-half-open-dropped.html Detection of half opened dropped] connections | |||
=== Other resources === | |||
[https://networklessons.com/cisco/ccie-routing-switching/pppoe-mtu-troubleshooting-cisco-ios/ MTU Troubleshooting Cisco IOS] | |||
[https://forum.networklessons.com/t/difference-between-ip-fragmentation-and-tcp-segmentation/1815 Difference between IP fragments and TCP segmentation] | |||
=== TCP/IP Performance Tuning === | |||
[https://web.archive.org/web/20151107132003/http://www.psc.edu/index.php/networking/641-tcp-tune Enabling High Performance Data Transfers] notes for users and system administrators who want to maximize TCP/IP performance on their computer systems. | |||
[https://en.wikipedia.org/wiki/Bandwidth-delay_product bandwidth-delay product], aka "Long Fat Network" (LFN), is the product of a data link's capacity (in bits per second) and its round-trip delay time (in seconds) | |||
[https://en.wikipedia.org/wiki/TCP_window_scale_option TCP window scale] option is an option to increase the receive window size allowed in Transmission Control Protocol above its former maximum value of 65,535 bytes. This TCP option, along with several others, is defined in IETF RFC 1323 which deals with long fat networks (LFNs). | |||
== Studies == | |||
[https://digitalcommons.lsu.edu/cgi/viewcontent.cgi?article=3101&context=gradschool_dissertations Study on the Performance of TCP over 10Gbps High Speed Networks] | |||
[https://iopscience.iop.org/article/10.1088/1742-6596/513/1/012042 10 Gbps TCP/IP streams from the FPGA for High Energy Physics] | |||
== Session Initiated Protocol (SIP) == | == Session Initiated Protocol (SIP) == | ||
| Line 5: | Line 54: | ||
[https://www.iana.org/assignments/sip-parameters/sip-parameters.xhtml SIP parameters] on nicely formatted and ad free site. | [https://www.iana.org/assignments/sip-parameters/sip-parameters.xhtml SIP parameters] on nicely formatted and ad free site. | ||
[https://www.tutorialspoint.com/session_initiation_protocol/index.htm SIP tutorial] | |||
=== SHAKEN === | === SHAKEN === | ||
| Line 11: | Line 61: | ||
== 3GPP Long Term Evolution (LTE) == | == 3GPP Long Term Evolution (LTE) == | ||
[http://www.artizanetworks.com/resources/tutorials/sae_tec.html System Architecture Evolution (SAE) and the Evolved Packet Core (EPC)] tutorials | |||
[https://www.cablefree.net/wirelesstechnology/4glte/lte-interfaces/ LTE interfaces] | |||
[http://lteuniversity.com/get_trained/expert_opinion1/b/lpatterson/archive/2013/06/12/cscf-in-volte-the-p-cscf-part-1-of-4.aspx CSCF in VoLTE the P-CSCF part 1 of 4] | [http://lteuniversity.com/get_trained/expert_opinion1/b/lpatterson/archive/2013/06/12/cscf-in-volte-the-p-cscf-part-1-of-4.aspx CSCF in VoLTE the P-CSCF part 1 of 4] | ||
| Line 17: | Line 71: | ||
[https://www.wireshark.org/docs/ Wireshark docs] | [https://www.wireshark.org/docs/ Wireshark docs] | ||
[https://www.wireshark.org/docs/man-pages/ Wireshark Manual (man) pages] | |||
[https://www.wireshark.org/docs/man-pages/editcap.html editcap man page] | |||
[https://wiki.wireshark.org/CaptureFilters Capture Filters] | [https://wiki.wireshark.org/CaptureFilters Capture Filters] | ||
[https://www.wireshark.org/docs/man-pages/ Wireshark | === Capture filter examples === | ||
Filter by destination IP address <code>dst host x.x.x.x</code> | |||
Filter by a set of TCP ports <code>tcp port 22 or tcp port 443 or tcp port 8080</code> | |||
Filter by TCP/UPD port <code>port 5060</code> | |||
=== Display filter examples === | |||
Filter out TCP Keep-Alive and TCP Keep-Alive ACK with this filter: | |||
<code>!(tcp.flags.ack && tcp.len <=1)</code> | |||
Filter by port 442 and remove TCP Keep-Alive and TCP Keep-Alive ACK with this filter: | |||
<code>tcp.port == 443 && !(tcp.flags.ack && tcp.len <= 1)</code> | |||
=== Add custom columns === | |||
Add TCP length column to Wireshark | |||
[[File:Tcp.len.png|border|TCP length column]] | |||
=== tshark === | |||
Export from network capture all TCP payloads using a display filter as octet stream (ASCII hex stream) | |||
<pre>tshark -r <file_name> -Y "ip.src==192.168.1.100 && tcp.port==22222" -T fields -e data > output_file_name.txt</pre> | |||
=== Editcap === | |||
Reference [https://www.wireshark.org/docs/man-pages/editcap.html editcap man] page | |||
Saves only packets whose timestamp is on or after start time. The time is given in the following format YYYY-MM-DD HH:MM:SS. | |||
Example of timestamps after 2018-12-26 00:00:00 using PowerShell: | |||
<pre>& 'C:\Program Files\Wireshark\editcap.exe' -A "2018-12-26 00:00:00" infile outfile</pre> | |||
Example to limit capture file from frame number 890000 to 910000 (inclusive) using PowerShell: | |||
<pre>& 'C:\Program Files\Wireshark\editcap.exe' -r infile.pcap smallerOutFile.pcap 890000-910000</pre> | |||
'''Note: smallerOutFile.pcap in above example will have different frame numbers (counting starts over when you open file).''' | |||
== Gigabit Ethernet == | == Gigabit Ethernet == | ||
=== Throughput === | === Throughput === | ||
Rickard Nobel article on [http://rickardnobel.se/actual-throughput-on-gigabit-ethernet/ actual gigabit ethetnet throughput] | Rickard Nobel article on [http://rickardnobel.se/actual-throughput-on-gigabit-ethernet/ actual gigabit ethetnet throughput] | ||
== Cisco == | |||
[[My Cisco ASA Notes]] | |||
== Juniper == | |||
[https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-interface-ds1.html T1/E1 info] | |||
== NetFlow & IPFIX == | |||
[https://en.wikipedia.org/wiki/NetFlow NetFlow] | |||
[https://en.wikipedia.org/wiki/IP_Flow_Information_Export IP Flow Information Export] | |||
<center>[[Computing | To Computing]]</center> | <center>[[Computing | To Computing]]</center> | ||
Latest revision as of 09:53, 4 May 2022
Networking
Open Platform for NFV (OPNFV) is a collaborative project under the Linux Foundation that is transforming global networks through open source Network Functions Virtualization (NFV)
OSM is delivering an open source Management and Orchestration (MANO) stack aligned with ETSI NFV Information Models. As an community-led community, OSM offers a production-quality MANO stack that meets operators' requirements for commercial NFV deployments.
ETSI, Home of NFV and their short video explaining NFV.
Wikipedia NFV article
Layer 2 Switching
Understanding SPAN,RSPAN,and ERSPAN
Network Packet Brokers
Network Packet Broker vs Network TAP
TCP and IP
Excellent write up on basics of TCP
Diagnose TCP connection setup issues
TCP/IP .NET Sockets FAQ
Excellent write up on some TCP/IP information by Stephen Cleary
Detection of half opened dropped connections
Other resources
Difference between IP fragments and TCP segmentation
TCP/IP Performance Tuning
Enabling High Performance Data Transfers notes for users and system administrators who want to maximize TCP/IP performance on their computer systems.
bandwidth-delay product, aka "Long Fat Network" (LFN), is the product of a data link's capacity (in bits per second) and its round-trip delay time (in seconds)
TCP window scale option is an option to increase the receive window size allowed in Transmission Control Protocol above its former maximum value of 65,535 bytes. This TCP option, along with several others, is defined in IETF RFC 1323 which deals with long fat networks (LFNs).
Studies
Study on the Performance of TCP over 10Gbps High Speed Networks
10 Gbps TCP/IP streams from the FPGA for High Energy Physics
Session Initiated Protocol (SIP)
SIP parameters on nicely formatted and ad free site.
SHAKEN
3GPP Long Term Evolution (LTE)
System Architecture Evolution (SAE) and the Evolved Packet Core (EPC) tutorials
CSCF in VoLTE the P-CSCF part 1 of 4
Capture filter examples
Filter by destination IP address dst host x.x.x.x
Filter by a set of TCP ports tcp port 22 or tcp port 443 or tcp port 8080
Filter by TCP/UPD port port 5060
Display filter examples
Filter out TCP Keep-Alive and TCP Keep-Alive ACK with this filter:
!(tcp.flags.ack && tcp.len <=1)
Filter by port 442 and remove TCP Keep-Alive and TCP Keep-Alive ACK with this filter:
tcp.port == 443 && !(tcp.flags.ack && tcp.len <= 1)
Add custom columns
Add TCP length column to Wireshark
tshark
Export from network capture all TCP payloads using a display filter as octet stream (ASCII hex stream)
tshark -r <file_name> -Y "ip.src==192.168.1.100 && tcp.port==22222" -T fields -e data > output_file_name.txt
Editcap
Reference editcap man page
Saves only packets whose timestamp is on or after start time. The time is given in the following format YYYY-MM-DD HH:MM:SS.
Example of timestamps after 2018-12-26 00:00:00 using PowerShell:
& 'C:\Program Files\Wireshark\editcap.exe' -A "2018-12-26 00:00:00" infile outfile
Example to limit capture file from frame number 890000 to 910000 (inclusive) using PowerShell:
& 'C:\Program Files\Wireshark\editcap.exe' -r infile.pcap smallerOutFile.pcap 890000-910000
Note: smallerOutFile.pcap in above example will have different frame numbers (counting starts over when you open file).
Gigabit Ethernet
Throughput
Rickard Nobel article on actual gigabit ethetnet throughput