From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by dpdk.org (Postfix) with ESMTP id 0A347594B for ; Mon, 21 Dec 2015 17:11:16 +0100 (CET) Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by fmsmga101.fm.intel.com with ESMTP; 21 Dec 2015 08:11:15 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.20,460,1444719600"; d="scan'208";a="621676476" Received: from irsmsx101.ger.corp.intel.com ([163.33.3.153]) by FMSMGA003.fm.intel.com with ESMTP; 21 Dec 2015 08:11:13 -0800 Received: from irsmsx108.ger.corp.intel.com ([169.254.11.23]) by IRSMSX101.ger.corp.intel.com ([169.254.1.236]) with mapi id 14.03.0248.002; Mon, 21 Dec 2015 16:11:12 +0000 From: "Gray, Mark D" To: "Richardson, Bruce" , Matthew Hall Thread-Topic: [dpdk-dev] tcpdump support in DPDK 2.3 Thread-Index: AdE2VczoK1KjRPfbTZOwcyLAzr7edQAR5KSAAAGuNbsABJycgAACUtqAAEu+vAAAAfHZgAAAikiAAA1DYYAA9gB7gAAAnbUw Date: Mon, 21 Dec 2015 16:11:12 +0000 Message-ID: <738D45BC1F695740A983F43CFE1B7EA943943EEB@IRSMSX108.ger.corp.intel.com> References: <98CBD80474FA8B44BF855DF32C47DC358AF758@smartserver.smartshare.dk> <20151214182931.GA17279@mhcomputing.net> <20151214223613.GC21163@mhcomputing.net> <20151216104502.GA10020@bricha3-MOBL3> <98CBD80474FA8B44BF855DF32C47DC358AF76F@smartserver.smartshare.dk> <20151216115611.GB10020@bricha3-MOBL3> <20151216181557.GA16963@mhcomputing.net> <20151221153945.GA12016@bricha3-MOBL3> In-Reply-To: <20151221153945.GA12016@bricha3-MOBL3> Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiZmVhZTVhYjgtZDgxMC00NzkwLWFiMjctY2JkZmFmMmUxN2UxIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX0lDIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE1LjQuMTAuMTkiLCJUcnVzdGVkTGFiZWxIYXNoIjoiMjlibm5vM2s3eStYb0lzbmg0RE9STEdvOTd2QW5aS0VicTNVNzZUUGNRVT0ifQ== x-ctpclassification: CTP_IC x-originating-ip: [163.33.239.181] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "dev@dpdk.org" , =?iso-8859-1?Q?Morten_Br=F8rup?= Subject: Re: [dpdk-dev] tcpdump support in DPDK 2.3 X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: patches and discussions about DPDK List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Dec 2015 16:11:17 -0000 > This is something also being looked for by folks such as those > working on OVS e.g. called out at > http://openvswitch.org/pipermail/dev/2015-August/058814.html >=20 > "- Insight into the system and debuggability: nothing beats tcpdump for= the > kernel datapath. Can something similar be done for the userspace > datapath? >=20 > - Consistency of the tools: some commands are slightly different for th= e > userspace/kernel datapath. Ideally there shouldn't be any difference= ." >=20 I had a painful experience with OVS-DPDK recently which may be representati= ve of a typical usability issue encountered.=20 I was trying to connect two Openstack compute nodes together. I had done the configuration without DPDK first. It was easy to debug as I could use tcpdump to look at the eth ports and see what type of traffic was entering the compute node. I also needed to check if the traffic was actually VxLAN traffic and what the VNI was in order to be able to follow the traffic around the bridges in OVS. This all went quite well and I was able to bring up my set up quite easily.=20 Then I tried to set up the same thing with DPDK. I couldn't get traffic bet= ween the compute nodes but I had no easy way to just dump the traffic coming int= o (or out of) the compute node. Of course, there were some things I could do = but, for me, DPDK would be far more usable if I could just use tcpdump. As I kno= w DPDK to some extent, I can usually get around these problems but I suspect that a new user to DPDK would get very discouraged and frustrated by an=20 experience like that.=20 I'm not sure how often tcpdump is used in production environments but it is very useful when debugging a live system without having to modify code. It = would be good if it could work at high rates and be really flexible but it probably = makes sense to focus on the basics first.