煩請(qǐng)哪位兄弟有空時(shí)幫忙在純FreeBSD環(huán)境上進(jìn)行一下對(duì)內(nèi)網(wǎng)某IP的ping flood test

wyq

之前無意中發(fā)現(xiàn)在Netscaler（運(yùn)行在FreeBSD上的商用proxy系統(tǒng)）上進(jìn)行ping flood test時(shí)經(jīng)常出現(xiàn)大量丟包，而同樣網(wǎng)絡(luò)環(huán)境內(nèi)的Linux系統(tǒng)進(jìn)行相同的測試時(shí)則不會(huì)丟包。廠家答復(fù)說是FreeBSD自身的問題。因這邊沒有FreeBSD環(huán)境，煩請(qǐng)哪位兄弟有空時(shí)幫忙在純FreeBSD環(huán)境上進(jìn)行一下對(duì)內(nèi)網(wǎng)某IP的ping flood test，并提供一下FreeBSD版本號(hào)和截圖。謝謝！

root@adc1# ping -f 10.1.133.141
PING 10.1.133.141 (10.1.133.141): 56 data bytes
....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................^C
--- 10.1.133.141 ping statistics ---
7340 packets transmitted, 5875 packets received, 20.0% packet loss
round-trip min/avg/max/stddev = 0.361/1.263/28.997/0.880 ms

lsstarboy

freebsd限制了ping的數(shù)量為每秒200，想提高的話可以用自行提高net.inet.icmp.icmplim值，我測試到過4000。

其實(shí)不需要工具，ping -i本身可以做到每秒上千。

wyq

sysctl net.inet.icmp.icmplim 這里限制的好像是外部ping 本機(jī)的response吧？這里將其設(shè)置為0禁用后，使用ping -f測試內(nèi)網(wǎng)IP仍然有丟包

qq58945591

wyq 發(fā)表于 2015-05-15 17:13
之前無意中發(fā)現(xiàn)在Netscaler（運(yùn)行在FreeBSD上的商用proxy系統(tǒng)）上進(jìn)行ping flood test時(shí)經(jīng)常出現(xiàn)大量丟包， ...

這個(gè)丟包是指的什么丟包？ 發(fā)送ping包者自己訪問外網(wǎng)出現(xiàn)丟包？ 目標(biāo)機(jī)網(wǎng)絡(luò)堵塞導(dǎo)致訪問外網(wǎng)丟包？


我這邊測試的是，freebsd 對(duì)freebsd ,  發(fā)送機(jī)發(fā)的數(shù)據(jù)包到不了對(duì)方多少，丟失很多。freebsd 發(fā)給linux ,數(shù)據(jù)包全部送達(dá)無丟失.

當(dāng)然測試是虛擬機(jī)，freebsd 對(duì)freebsd,無影響。  freebsd 對(duì)linux  (kali linux) ,機(jī)器出現(xiàn)卡機(jī)情況了，宿主機(jī)出現(xiàn)cpu使用100%..


我的是freebsd 8.4 ,linux 是kali ,      3臺(tái)freebsd,其中2臺(tái)當(dāng)發(fā)送機(jī)，一臺(tái)當(dāng)目標(biāo)機(jī).還有一臺(tái)kali linux ..默認(rèn)沒改什么東西。

lsstarboy

回復(fù) 3# wyq


就是接收機(jī)的，接收機(jī)禁止也不會(huì)超過4000，當(dāng)發(fā)送機(jī)時(shí)沒有限制，一秒鐘5000很正常。

lsstarboy

//對(duì)FreeBSD
# ping -f -c 20000 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes
.
--- 10.10.10.1 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.040/0.052/0.259/0.013 ms

//對(duì)Linux
# ping -f -c 20000 10.10.10.2
PING 10.10.10.2 (10.10.10.2): 56 data bytes
.
--- 10.10.10.2 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.062/0.113/1.336/0.010 ms

lsstarboy

//對(duì)Linux
# time ping -c 200000 -qi 0.0005 10.10.10.2
PING 10.10.10.2 (10.10.10.2): 56 data bytes

--- 10.10.10.2 ping statistics ---
200000 packets transmitted, 200000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.036/0.116/0.201/0.023 ms
0.063u 1.867s 0:01.93 99.4%     30+255k 0+0io 0pf+0w


//對(duì)FreeBSD，0.0005直接就斷掉了，對(duì)方設(shè)置到10000
# time ping -c 200000 -qi 0.0005 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes

--- 10.10.10.1 ping statistics ---
200000 packets transmitted, 9998 packets received, 95.0% packet loss
round-trip min/avg/max/stddev = 0.038/0.058/0.229/0.015 ms
0.063u 1.189s 0:02.31 53.6%     30+256k 0+0io 0pf+0w
# time ping -c 20000 -qi 0.001 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes

--- 10.10.10.1 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.042/0.055/0.451/0.011 ms
0.078u 0.365s 0:21.42 2.0%      18+158k 0+0io 0pf+0w

wyq

回復(fù) 4# qq58945591

謝謝回復(fù)，之前沒說清楚，這里的丟包指的是FreeBSD作為source，在其上執(zhí)行ping -f且目的IP是Linux時(shí)出現(xiàn)的丟包。