Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-6887

tcpslice: problems finding end packet of file <filename>

Details

    • Minor
    • sst_cs_infra_services
    • ssg_core_services
    • 10
    • 1
    • QE ack
    • False
    • Hide

      None

      Show
      None
    • If docs needed, set a value

    Description

      Description of problem:
      My tests capture traffic on two different interfaces from a VM and then merge the resulting captures with tcpslice when they are not empty.
      Sometimes, the tcpslice command fails like this:
      [root@cmp-3-0 ~]# tcpslice -v -w /tmp/kk /tmp/tmp.tozOLM0ErS /tmp/tmp.k62LTkDd4k
      tcpslice: problems finding end packet of file /tmp/tmp.k62LTkDd4k

      This is how this capture files were obtained:
      $ tcpdump -s0 -Uni enp2s0 src host 2001:db8::f816:3eff:fe6a:1fe6 and dst host f00d:f00d:f00d:4::1 and tcp src port 22 -w /tmp/tmp.tozOLM0ErS &
      $ tcpdump -s0 -Uni enp3s0 src host 2001:db8::f816:3eff:fe6a:1fe6 and dst host f00d:f00d:f00d:4::1 and tcp src port 22 -w /tmp/tmp.k62LTkDd4k &

      I can open both files with "tcpdump -r" on the RHEL9.2 VM where they were obtained, so I don't know what is the problem with tmp.k62LTkDd4k .

      I have tried in my laptop (Fedora 37 - tcpdump-4.99.4-2.fc37.x86_64) and I got the same tcpslice failure. However, mergecap worked well:
      $ mergecap -w merged tmp.k62LTkDd4k tmp.tozOLM0ErS

      I will attach the previous files to this BZ.

      Version-Release number of selected component (if applicable):
      RHEL 9.2 - tcpdump-4.99.0-6.el9.x86_64

      How reproducible:
      This tests are re-executed often by our jobs and they fail due to this issue sometimes... I'd say 5% times (rough estimation)

      Steps to Reproduce:
      See previous description

      Actual results:
      tcpsile fails

      Expected results:
      tcpsile should not fail

      Attachments

        Activity

          People

            mruprich@redhat.com Michal Ruprich
            eolivare Eduardo Olivares Toledo
            Michal Ruprich Michal Ruprich
            Ondrej Mejzlik Ondrej Mejzlik
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: