Difference between revisions of "Networking"
m (→Capture filter examples)
|Line 1:||Line 1:|
== TCP and IP ==
== TCP and IP ==
Latest revision as of 12:09, 1 July 2020
- 1 Networking
- 2 TCP and IP
- 3 Studies
- 4 Session Initiated Protocol (SIP)
- 5 3GPP Long Term Evolution (LTE)
- 6 Wireshark and related stuff
- 7 Gigabit Ethernet
- 8 Cisco
- 9 Juniper
Open Platform for NFV (OPNFV) is a collaborative project under the Linux Foundation that is transforming global networks through open source Network Functions Virtualization (NFV)
OSM is delivering an open source Management and Orchestration (MANO) stack aligned with ETSI NFV Information Models. As an community-led community, OSM offers a production-quality MANO stack that meets operators' requirements for commercial NFV deployments.
Wikipedia NFV article
TCP and IP
Excellent write up on basics of TCP
TCP/IP .NET Sockets FAQ
Excellent write up on some TCP/IP information by Stephen Cleary
Detection of half opened dropped connections
TCP/IP Performance Tuning
Enabling High Performance Data Transfers notes for users and system administrators who want to maximize TCP/IP performance on their computer systems.
bandwidth-delay product, aka "Long Fat Network" (LFN), is the product of a data link's capacity (in bits per second) and its round-trip delay time (in seconds)
TCP window scale option is an option to increase the receive window size allowed in Transmission Control Protocol above its former maximum value of 65,535 bytes. This TCP option, along with several others, is defined in IETF RFC 1323 which deals with long fat networks (LFNs).
Session Initiated Protocol (SIP)
SIP parameters on nicely formatted and ad free site.
3GPP Long Term Evolution (LTE)
Capture filter examples
Filter by destination IP address
dst host x.x.x.x
Filter by a set of TCP ports
tcp port 22 or tcp port 443 or tcp port 8080
Filter by TCP/UPD port
Display filter examples
Filter out TCP Keep-Alive and TCP Keep-Alive ACK with this filter:
!(tcp.flags.ack && tcp.len <=1)
Filter by port 442 and remove TCP Keep-Alive and TCP Keep-Alive ACK with this filter:
tcp.port == 443 && !(tcp.flags.ack && tcp.len <= 1)
Add custom columns
Add TCP length column to Wireshark
Export from network capture all TCP payloads using a display filter as octet stream (ASCII hex stream)
tshark -r <file_name> -Y "ip.src==192.168.1.100 && tcp.port==22222" -T fields -e data > output_file_name.txt
Reference editcap man page
Saves only packets whose timestamp is on or after start time. The time is given in the following format YYYY-MM-DD HH:MM:SS.
Example of timestamps after 2018-12-26 00:00:00 using PowerShell:
& 'C:\Program Files\Wireshark\editcap.exe' -A "2018-12-26 00:00:00" infile outfile
Example to limit capture file from frame number 890000 to 910000 (inclusive) using PowerShell:
& 'C:\Program Files\Wireshark\editcap.exe' -r infile.pcap smallerOutFile.pcap 890000-910000
Note: smallerOutFile.pcap in above example will have different frame numbers (counting starts over when you open file).
Rickard Nobel article on actual gigabit ethetnet throughput