Re: Howto use agr to aggregate VPN tunnels

[BERTRAND joël <joel.bertrand%systella.fr@localhost>]

Greg Troxel a écrit :
> Yes, that's right.  -s does not show you interface stats.  It shows you
> overall networking stats.  Unfortunately you need to understand more to
> make sense of it.  But seriously: do the exercise I suggest: run netstat
> -s before and after, and diff, and think about what you see, and look up
> things to understand.

--- orig        2016-12-19 21:29:38.032607635 +0100
+++ fin 2016-12-19 21:29:47.276231689 +0100
@@ -5,7 +5,7 @@
                unreach: 12
        0 messages with bad code fields
        0 messages < minimum length
-       1 bad checksum
+       5 bad checksums  <------------------------------ ?
        0 messages with bad length
        0 multicast echo requests ignored
        0 multicast timestamp requests ignored
@@ -86,18 +86,18 @@
        0 packets with ECN CE bit
        0 packets ECN ECT(0) bit
 udp:
-       80 datagrams received
+       83 datagrams received
        0 with incomplete header
        0 with bad data length field
        0 with bad checksum
        12 dropped due to no socket
        0 broadcast/multicast datagrams dropped due to no socket
        0 dropped due to full socket buffers
-       68 delivered
-       75 PCB hash misses
-       81 datagrams output
+       71 delivered
+       77 PCB hash misses
+       83 datagrams output
 ip:
-       81 total packets received
+       88 total packets received
        0 bad header checksums
        0 with size smaller than minimum
        0 with data size < data length
@@ -112,14 +112,14 @@
        0 malformed fragments dropped
        0 fragments dropped after timeout
        0 packets reassembled ok
-       81 packets for this host
+       88 packets for this host
        0 packets for unknown/unsupported protocol
        0 packets forwarded (0 packets fast forwarded)
        0 packets not forwardable
        0 redirects sent
        0 packets no matching gif found
-       94 packets sent from this host
-       2 packets sent with fabricated ip header
+       100 packets sent from this host
+       7 packets sent with fabricated ip header
        0 output packets dropped due to no bufs, etc.
        0 output packets discarded due to no route
        0 output datagrams fragmented
@@ -291,9 +291,9 @@
        0 delivered
        0 datagrams output
 arp:
-       14 packets sent
+       19 packets sent
                6 reply packets
-               8 request packets
+               13 request packets
        9 packets received
                0 reply packets
                9 valid request packets
@@ -310,9 +310,9 @@
                0 packets received on wrong interface
                0 entrys overwritten
                0 changes in hardware address length
-       1 packet deferred pending ARP resolution
+       6 packets deferred pending ARP resolution
                0 sent
-               1 dropped
+               6 dropped
        0 failures to allocate llinfo
 ddp:
        0 packets with short headers

After a long uptime and a lot of ethernet transmitted packets :
einstein# netstat -s | grep bad
        ...
        5 bad checksums
	...

If I try to sent ICMP packets over agr0, bad checksums counter goes up :

28 packets transmitted, 0 packets received, 100.0% packet loss
einstein# netstat -s | grep bad
        ...
        32 bad checksums
	...

	I suppose packets are not transfered from agr0 to tap0/1 as checksum 
are false.

	Best regards,

	JKB