[Bloat] links to work that supersedes pping?

[Bloat] links to work that supersedes pping?

[Kathleen Nichols]

I've been tilting at other windmills the past several years so I don't 
maintain pping (or other passive measurement stuff on Pollere's github 
account) but I know that folks on this list either have done or would 
know of much nicer follow-ons. I thought maybe I should put a note in 
the Readme directing anyone who stumbles across Pollere's pping that 
they may wish to look elsewhere. Anyone have any good links?

	thanks in advance,
		Kathie

[Bloat] Re: links to work that supersedes pping?

[Frantisek Borsik]

Hey Kathie,

Thanks for all the work! We have started with pping at LibreQoS back then <3

What I recall of top of my head, it's epping from Simon (in CC)

https://datatracker.ietf.org/meeting/116/materials/slides-116-maprg-efficient-continuous-latency-monitoring-with-ebpf
https://research.redhat.com/blog/article/passive-network-monitoring-with-ebpf/


All the best,

Frank

Frantisek (Frank) Borsik


*In loving memory of Dave Täht: *1965-2025

https://libreqos.io/2025/04/01/in-loving-memory-of-dave/


https://www.linkedin.com/in/frantisekborsik

Signal, Telegram, WhatsApp: +421919416714

iMessage, mobile: +420775230885

Skype: casioa5302ca

frantisek.borsik@gmail.com


On Mon, Aug 17, 2026 at 11:49 PM Kathleen Nichols <nichols@pollere.net>
wrote:

>
> I've been tilting at other windmills the past several years so I don't
> maintain pping (or other passive measurement stuff on Pollere's github
> account) but I know that folks on this list either have done or would
> know of much nicer follow-ons. I thought maybe I should put a note in
> the Readme directing anyone who stumbles across Pollere's pping that
> they may wish to look elsewhere. Anyone have any good links?
>
>         thanks in advance,
>                 Kathie
> _______________________________________________
> Bloat mailing list -- bloat@lists.bufferbloat.net
> To unsubscribe send an email to bloat-leave@lists.bufferbloat.net
>

[Bloat] Re: links to work that supersedes pping?

[Toke Høiland-Jørgensen]

Frantisek Borsik <frantisek.borsik@gmail.com> writes:

> Hey Kathie,
>
> Thanks for all the work! We have started with pping at LibreQoS back then <3
>
> What I recall of top of my head, it's epping from Simon (in CC)
>
> https://datatracker.ietf.org/meeting/116/materials/slides-116-maprg-efficient-continuous-latency-monitoring-with-ebpf
> https://research.redhat.com/blog/article/passive-network-monitoring-with-ebpf/

And the code lives here:

https://github.com/xdp-project/bpf-examples/tree/main/pping

-Toke

[Bloat] Re: links to work that supersedes pping?

[Simon Sundberg]

On Mon, 2026-08-17 at 14:49 -0700, Kathleen Nichols wrote:
>
> I've been tilting at other windmills the past several years so I don't
> maintain pping (or other passive measurement stuff on Pollere's github
> account) but I know that folks on this list either have done or would
> know of much nicer follow-ons. I thought maybe I should put a note in
> the Readme directing anyone who stumbles across Pollere's pping that
> they may wish to look elsewhere. Anyone have any good links?
>
> thanks in advance,
> Kathie

Thanks for pping, it's been a great inspiration!

In addition to my own eBPF-based pping (epping, already covered by Frank
and Toke), there are some other alternatives that may also be relevant
(although both Spindump and Dart are abandoned research projects).

 * Spindump: User space (libpcap) continues latency monitoring with
   support for multiple protocols (TCP, QUIC, COAP, DNS, ICMP, and
   SCTP). Code at: https://github.com/EricssonResearch/spindump
 * Dart: P4 solution for Intel Tofino switches that passively monitors
   TCP RTT. Paper at https://doi.org/10.1145/3544216.3544222, code
   at https://github.com/SatadalSengupta/sigcomm22-paper67-artifacts
 * bcc-tools/tcprtt: A small utility that's part of the BCC-tools
   (https://github.com/iovisor/bcc/tree/master/tools) repository that
   reports the kernel's own sRTT estimate for each received TCP packet
   (so only works for TCP connections to/from the monitored host).

With best regards, Simon Sundberg.


När du skickar e-post till Karlstads universitet behandlar vi dina personuppgifter<https://www.kau.se/gdpr>.
When you send an e-mail to Karlstad University, we will process your personal data<https://www.kau.se/en/gdpr>.

[Bloat] Re: links to work that supersedes pping?

[Frantisek Borsik]

Nice, thanks for the additional tools and source for the epping, guys.

Last but not least, here's LibreQoS' take on pping:
https://github.com/LibreQoE/LibreQoS/tree/main/src/rust/lqos_sys/src/bpf/common

We are just hoping that nobody is upset that we took a butcher's knife to
the really correct pping code :-)


All the best,

Frank

Frantisek (Frank) Borsik


*In loving memory of Dave Täht: *1965-2025

https://libreqos.io/2025/04/01/in-loving-memory-of-dave/


https://www.linkedin.com/in/frantisekborsik

Signal, Telegram, WhatsApp: +421919416714

iMessage, mobile: +420775230885

Skype: casioa5302ca

frantisek.borsik@gmail.com


On Tue, Aug 18, 2026 at 6:27 PM Simon Sundberg <Simon.Sundberg@kau.se>
wrote:

> On Mon, 2026-08-17 at 14:49 -0700, Kathleen Nichols wrote:
> >
> > I've been tilting at other windmills the past several years so I don't
> > maintain pping (or other passive measurement stuff on Pollere's github
> > account) but I know that folks on this list either have done or would
> > know of much nicer follow-ons. I thought maybe I should put a note in
> > the Readme directing anyone who stumbles across Pollere's pping that
> > they may wish to look elsewhere. Anyone have any good links?
> >
> > thanks in advance,
> > Kathie
>
> Thanks for pping, it's been a great inspiration!
>
> In addition to my own eBPF-based pping (epping, already covered by Frank
> and Toke), there are some other alternatives that may also be relevant
> (although both Spindump and Dart are abandoned research projects).
>
>  * Spindump: User space (libpcap) continues latency monitoring with
>    support for multiple protocols (TCP, QUIC, COAP, DNS, ICMP, and
>    SCTP). Code at: https://github.com/EricssonResearch/spindump
>  * Dart: P4 solution for Intel Tofino switches that passively monitors
>    TCP RTT. Paper at https://doi.org/10.1145/3544216.3544222, code
>    at https://github.com/SatadalSengupta/sigcomm22-paper67-artifacts
>  * bcc-tools/tcprtt: A small utility that's part of the BCC-tools
>    (https://github.com/iovisor/bcc/tree/master/tools) repository that
>    reports the kernel's own sRTT estimate for each received TCP packet
>    (so only works for TCP connections to/from the monitored host).
>
> With best regards, Simon Sundberg.
>
>
> När du skickar e-post till Karlstads universitet behandlar vi dina
> personuppgifter<https://www.kau.se/gdpr>.
> When you send an e-mail to Karlstad University, we will process your
> personal data<https://www.kau.se/en/gdpr>.
> _______________________________________________
> Bloat mailing list -- bloat@lists.bufferbloat.net
> To unsubscribe send an email to bloat-leave@lists.bufferbloat.net
>

[Bloat] Re: links to work that supersedes pping?

[Kathleen Nichols]

Thank you Frank, Toke, and Simon. I put all the relevant links into 
pping's README (and also noted in connmon's README).

	Kathie

On 8/17/26 2:49 PM, Kathleen Nichols wrote:
> 
> I've been tilting at other windmills the past several years so I don't 
> maintain pping (or other passive measurement stuff on Pollere's github 
> account) but I know that folks on this list either have done or would 
> know of much nicer follow-ons. I thought maybe I should put a note in 
> the Readme directing anyone who stumbles across Pollere's pping that 
> they may wish to look elsewhere. Anyone have any good links?
> 
>      thanks in advance,
>          Kathie
> _______________________________________________
> Bloat mailing list -- bloat@lists.bufferbloat.net
> To unsubscribe send an email to bloat-leave@lists.bufferbloat.net
>