wyq 发表于 2015-05-15 17:13

烦请哪位兄弟有空时帮忙在纯FreeBSD环境上进行一下对内网某IP的ping flood test

本帖最后由 wyq 于 2015-05-15 17:15 编辑

之前无意中发现在Netscaler(运行在FreeBSD上的商用proxy系统)上进行ping flood test时经常出现大量丢包,而同样网络环境内的Linux系统进行相同的测试时则不会丢包。厂家答复说是FreeBSD自身的问题。因这边没有FreeBSD环境,烦请哪位兄弟有空时帮忙在纯FreeBSD环境上进行一下对内网某IP的ping flood test,并提供一下FreeBSD版本号和截图。谢谢!

root@adc1# ping -f 10.1.133.141
PING 10.1.133.141 (10.1.133.141): 56 data bytes
....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................^C
--- 10.1.133.141 ping statistics ---
7340 packets transmitted, 5875 packets received, 20.0% packet loss
round-trip min/avg/max/stddev = 0.361/1.263/28.997/0.880 ms

lsstarboy 发表于 2015-05-15 17:50

freebsd限制了ping的数量为每秒200,想提高的话可以用自行提高net.inet.icmp.icmplim值,我测试到过4000。

其实不需要工具,ping -i本身可以做到每秒上千。

wyq 发表于 2015-05-15 18:19

sysctl net.inet.icmp.icmplim 这里限制的好像是外部ping 本机的response吧?这里将其设置为0禁用后,使用ping -f测试内网IP仍然有丢包

qq58945591 发表于 2015-05-15 21:51

wyq 发表于 2015-05-15 17:13 static/image/common/back.gif
之前无意中发现在Netscaler(运行在FreeBSD上的商用proxy系统)上进行ping flood test时经常出现大量丢包, ...



这个丢包是指的什么丢包? 发送ping包者自己访问外网出现丢包? 目标机网络堵塞导致访问外网丢包?


我这边测试的是,freebsd 对freebsd ,发送机发的数据包到不了对方多少,丢失很多。freebsd 发给linux ,数据包全部送达无丢失.

当然测试是虚拟机,freebsd 对freebsd,无影响。freebsd 对linux(kali linux) ,机器出现卡机情况了,宿主机出现cpu使用100%..


我的是freebsd 8.4 ,linux 是kali ,      3台freebsd,其中2台当发送机,一台当目标机.还有一台kali linux ..默认没改什么东西。

lsstarboy 发表于 2015-05-15 23:51

回复 3# wyq


就是接收机的,接收机禁止也不会超过4000,当发送机时没有限制,一秒钟5000很正常。

lsstarboy 发表于 2015-05-15 23:53


//对FreeBSD
# ping -f -c 20000 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes
.
--- 10.10.10.1 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.040/0.052/0.259/0.013 ms

//对Linux
# ping -f -c 20000 10.10.10.2
PING 10.10.10.2 (10.10.10.2): 56 data bytes
.
--- 10.10.10.2 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.062/0.113/1.336/0.010 ms

lsstarboy 发表于 2015-05-15 23:58

//对Linux
# time ping -c 200000 -qi 0.0005 10.10.10.2
PING 10.10.10.2 (10.10.10.2): 56 data bytes

--- 10.10.10.2 ping statistics ---
200000 packets transmitted, 200000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.036/0.116/0.201/0.023 ms
0.063u 1.867s 0:01.93 99.4%   30+255k 0+0io 0pf+0w


//对FreeBSD,0.0005直接就断掉了,对方设置到10000
# time ping -c 200000 -qi 0.0005 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes

--- 10.10.10.1 ping statistics ---
200000 packets transmitted, 9998 packets received, 95.0% packet loss
round-trip min/avg/max/stddev = 0.038/0.058/0.229/0.015 ms
0.063u 1.189s 0:02.31 53.6%   30+256k 0+0io 0pf+0w
# time ping -c 20000 -qi 0.001 10.10.10.1
PING 10.10.10.1 (10.10.10.1): 56 data bytes

--- 10.10.10.1 ping statistics ---
20000 packets transmitted, 20000 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.042/0.055/0.451/0.011 ms
0.078u 0.365s 0:21.42 2.0%      18+158k 0+0io 0pf+0w

wyq 发表于 2015-05-18 11:33

本帖最后由 wyq 于 2015-05-18 11:37 编辑

回复 4# qq58945591

谢谢回复,之前没说清楚,这里的丢包指的是FreeBSD作为source,在其上执行ping -f且目的IP是Linux时出现的丢包。


   
页: [1]
查看完整版本: 烦请哪位兄弟有空时帮忙在纯FreeBSD环境上进行一下对内网某IP的ping flood test