Hi - thanks for your reply. <snip> > Either capture is missing packets, or the analysis is missing rpc > replies, or the server is slow to reply and the client is retrying > aggressively. That would seem the obvious thing and of course was my first port of call. It certainly is suspicious and generally not what I would have expected. That said, to reiterate, libpcap (pcap_stats()) tells me neither the kernel nor the NIC dropped any packets. However, I need to be sure the NIC actually reports this info to libpcap as it isn't always supported. What I can say is that I have performed the capture both on the server (knfsd) and the client and they both agree that there are significantly less replied identified than calls! <snip> > Section 7.4.1 of rfc 1831? > > I'd never noticed that before.... > > In any case, I think that's just describing something that an RPC-based > protocol *could* do. NFS doesn't do this--in particular, NFS read calls > require replies. Right. OK. This makes much more sense than not getting replies to calls! > My suspicion is that tshark is missing some replies. Either the packet > loss counters are wrong, or tshark is failing to identify RPC replies > that start in the middle of a tcp segment? I seem to recall seeing that > before. Yes - I had wondered about that and I will modify my own code to verify if this is the case. I *assumed* that tcpdump or wireshark already did this! I guess it just expects application protocols to be aligned to the TCP boundary. Thanks for your help so far. Jim > --b. > > > The IBM and Oracle websites also have some > > info but not much. I have found nothing that enables > > me to identify batched requests (or rather the replies for a batch) in > > the protocol itself. Wireshark seems unable to do this also. > > > > I realise this is a bit off-topic but I was hoping someone might be able > > to point me in the right direction? Am I barking up the wrong tree? Is > > this behaviour expected - am I unable to match calls to replies when > > batching is used? The IBM website suggests; > > > > 'Batching assumes the following: > > > > Each remote procedure call in the pipeline requires no response from the > > server, and the server does not send a response message.' > > > > This sounds a bit awkward! It then goes on to suggest that; > > > > 'The remote procedure call's time out must be 0' > > > > For batched calls. But there is no call timeout in the RPC protocol > > right? Again, this must be up to the client implementation I suspect? > > > > Any help appreciated. > > > > Regards, > > > > Jim > > > > PS. I may well join the Linux RPC mailing list and direct this question > > at them instead. > > > > -- > > Senior Software Engineer > > Systems Development > > Framestore > > > > > > -- > > To unsubscribe from this list: send the line "unsubscribe linux-nfs" in > > the body of a message to majordomo@xxxxxxxxxxxxxxx > > More majordomo info at http://vger.kernel.org/majordomo-info.html -- Software Engineer Systems Development Framestore -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html