tcpdump -i eth2 -c 10 -vvn tcp and src host 195.117.92.22 and src port 8080 tcpdump: listening on eth2, link-type EN10MB (Ethernet), capture size 96 bytes 16:13:53.233821 IP (tos 0x0, ttl 64, id 45345, offset 0, flags [DF], length: 1300) 195.117.92.22.8080 > 10.15.1.23.3709: .187307195:187308455(1260) ack 4272934181 win 34020 16:13:53.269629 IP (tos 0x8, ttl 64, id 33857, offset 0, flags [DF], length: 302) 195.117.92.22.8080 > 195.117.92.52.1615:P 2320875159:2320875421(262) ack 410474467 win 33580 16:13:53.271395 IP (tos 0x8, ttl 64, id 19813, offset 0, flags [DF], length: 302) 195.117.92.22.8080 > 195.117.92.52.1607:P 922200803:922201065(262) ack 2836771851 win 33580 16:13:53.274230 IP (tos 0x8, ttl 64, id 33575, offset 0, flags [DF], length: 302) 195.117.92.22.8080 > 195.117.92.52.1611:P 533510245:533510507(262) ack 1426086820 win 33580 16:13:53.286116 IP (tos 0x0, ttl 64, id 21316, offset 0, flags [DF], length: 626) 195.117.92.22.8080 > 80.51.8.254.2570: P3642794155:3642794741(586) ack 4273607802 win 33580 16:13:53.287834 IP (tos 0x0, ttl 64, id 20094, offset 0, flags [DF], length: 40) 195.117.92.22.8080 > 80.51.8.254.2570: F [tcp sum ok] 586:586(0) ack 1 win 33580 16:13:53.292487 IP (tos 0x0, ttl 64, id 47741, offset 0, flags [DF], length: 48) 195.117.92.22.8080 > 195.117.92.52.1621: S [tcp sum ok] 1721266592:1721266592(0) ack 3841985029 win 32768 16:13:53.297528 IP (tos 0x8, ttl 64, id 26114, offset 0, flags [DF], length: 302) 195.117.92.22.8080 > 195.117.92.52.1615:P 262:524(262) ack 590 win 33580 16:13:53.299223 IP (tos 0x8, ttl 64, id 9046, offset 0, flags [DF], length: 301) 195.117.92.22.8080 > 195.117.92.52.1607: P 262:523(261) ack 582 win 33580 16:13:53.306729 IP (tos 0x8, ttl 64, id 64007, offset 0, flags [DF], length: 302) 195.117.92.22.8080 > 195.117.92.52.1611:P 262:524(262) ack 591 win 33580 jak widac czesc pakietow ma ustawione TOS na 0x8 a czesc nie. Zmierzmy teraz ile tego jest: # trafiony ruch WWW -- jest w cache stakrate -i eth2 -b -f 'tcp and src host 195.117.92.22 and src port 8080 and ip[1]=8' => Currently 167.01 kbps/30.15 pps, Average: 167.01 kbps/30.15 pps => Currently 701.59 kbps/80.40 pps, Average: 433.21 kbps/55.14 pps => Currently 345.98 kbps/55.00 pps, Average: 404.08 kbps/55.09 pps => Currently 769.05 kbps/114.43 pps, Average: 495.78 kbps/70.00 pps => Currently 716.99 kbps/98.59 pps, Average: 542.29 kbps/76.01 pps => Currently 1.77 Mbps/205.41 pps, Average: 737.84 kbps/95.91 pps => Currently 759.61 kbps/90.00 pps, Average: 740.95 kbps/95.07 pps => Currently 1.06 Mbps/115.00 pps, Average: 784.64 kbps/97.56 pps => Currently 579.10 kbps/60.00 pps, Average: 761.37 kbps/93.33 pps => Currently 599.14 kbps/60.00 pps, Average: 745.14 kbps/90.00 pps => Currently 487.99 kbps/45.23 pps, Average: 721.87 kbps/85.95 pps => Currently 1.06 Mbps/115.58 pps, Average: 752.06 kbps/88.37 pps => Currently 780.43 kbps/90.00 pps, Average: 754.25 kbps/88.50 pps => Currently 929.73 kbps/110.00 pps, Average: 766.51 kbps/90.00 pps => Currently 644.80 kbps/75.00 pps, Average: 758.40 kbps/89.00 pps => Currently 415.09 kbps/46.95 pps, Average: 735.87 kbps/86.24 pps => Currently 371.09 kbps/53.76 pps, Average: 715.69 kbps/84.44 pps => Currently 401.52 kbps/45.00 pps, Average: 698.23 kbps/82.25 pps => Currently 543.32 kbps/90.00 pps, Average: 689.90 kbps/82.63 pps # nietrafiony ruch WWW stakrate -i eth2 -b -f 'tcp and src host 195.117.92.22 and src port 8080 and ip[1]=0' => Currently 1.20 Mbps/165.00 pps, Average: 1.20 Mbps/165.00 pps => Currently 1.29 Mbps/215.00 pps, Average: 1.24 Mbps/190.00 pps => Currently 2.03 Mbps/316.58 pps, Average: 1.50 Mbps/231.67 pps => Currently 1.74 Mbps/286.43 pps, Average: 1.56 Mbps/245.00 pps => Currently 1.58 Mbps/300.00 pps, Average: 1.56 Mbps/256.00 pps => Currently 425.62 kbps/80.00 pps, Average: 1.37 Mbps/226.67 pps => Currently 1.11 Mbps/185.93 pps, Average: 1.33 Mbps/220.71 pps => Currently 1.56 Mbps/225.00 pps, Average: 1.36 Mbps/221.11 pps => Currently 1.83 Mbps/231.16 pps, Average: 1.41 Mbps/222.22 pps => Currently 1.94 Mbps/276.38 pps, Average: 1.46 Mbps/227.50 pps => Currently 862.97 kbps/299.02 pps, Average: 1.41 Mbps/234.23 pps => Currently 809.59 kbps/147.96 pps, Average: 1.36 Mbps/227.08 pps => Currently 424.51 kbps/100.50 pps, Average: 1.28 Mbps/217.31 pps => Currently 447.70 kbps/80.00 pps, Average: 1.22 Mbps/207.50 pps ip[1] odpowiada wartosci pola TOS