Far fewer "Bad TCP" frames using linux

[wat0114]

This is not a thread to promote Linux, only an observation I'd like to share.


Using Wireshark to capture data in a simple experiment run under both Windows XP Pro and Linux (PCLinuxOS 2007), same hardware because I'm using dual boot for the OS's. Browser is Firefox 2.0.0.14. PC is behind older D-Link router (DI-624) I have also under Windows disabled TX/RX checksum offload under NIC's properties


First start Wireshark to capture on my NIC's interface
Open Firefox to homepage (Google.ca)
Open Wilderssecurity.com
Open tsn.ca
Stop Wiresharkcaptuere after tsn.ca loads


This same experiment repeated two more times, then thee times again with my software firewall and Ad muncher shut down.

Then boot to linux and repeat same experiment as above, three consecutive times as well. Only security with Linux is iptables firewall.

I take note of number of "Bad TCP" frames under all conditions, and Linux count of these frames is at least 75% less than that of Windows.

I don't know the reason for this. Perhaps Linux does a better job of handling TCP/IP traffic? Anyways, I find it interesting.

Sorry, I forgot to mention there is little difference in "total" frame count in the experiments between Windows and Linux, so there does not seem to be more overhead in windows because of more bad tcp frames. Obviously this is a good thing.

[Mrkvonic]

Hello,
Do you have the same MTU set in both Windows and PCLinuxOS?
Mrk

[wat0114]

{QUOTE-> Hello,
Do you have the same MTU set in both Windows and PCLinuxOS?
Mrk <-QUOTE}

Yes, set @ 1500 for both OS's. I've played with those settings before in Windows and found little to no difference with regards to packet captures. What is odd is that even with the RX/TX checksum offloads set to disable for my NIC under Windows, I'm still seeing so many of those "bad packets".

As an aside, my daughter wants Linux installed on her computer. She finds her favorite Flash games run considerably faster on it :)

[Arup]

Not surprising as Linux kernel is far more optimized and the TCP stack is a reflection of that, IP tables also runs way better than Windows inbuilt firewall.

[N1ckR]

{QUOTE-> Yes, set @ 1500 for both OS's. I've played with those settings before in Windows and found little to no difference with regards to packet captures. What is odd is that even with the RX/TX checksum offloads set to disable for my NIC under Windows, I'm still seeing so many of those "bad packets".

As an aside, my daughter wants Linux installed on her computer. She finds her favorite Flash games run considerably faster on it :) <-QUOTE}

Sorry to change the subject, which version of Flash are you using, I tried the latest Office with Ubuntu 8.04 and its performance is OK with youtube, but terrible with games, compared to windows.

[wat0114]

{QUOTE-> Sorry to change the subject, which version of Flash are you using, I tried the latest Office with Ubuntu 8.04 and its performance is OK with youtube, but terrible with games, compared to windows. <-QUOTE}

No troubles. I have to check later at home. I was using and liking Ubuntu until a recent spate of updates, around 60 of them I think, that caused performance issues with it. I decided to try PCLinux and find it awesome, so I'll stick with it for now. I'm impressed with the KDE environment.

**Edit**

Java version: Sun 1.6.0.06 for PCLos2007