RTT times different between nping and other ping implementations

[Keith Christian <keith1christian () gmail com>]

I've noticed this for the past year or so since NPING was introduced.

First, I may not be reading / interpreting the values for RTT
correctly between the standard Windows ping utility and nping.

Here is a ping to a remote IP over 16 hops.  Ten pings with Windows
PING.EXE to help smooth its "stat," followed immediately with an nping
to the same IP.

Windows ping yields 29 / 33 / 29 ms for min/max/avg, and nping yields
47 / 31 / 34.4.  I'd be wiling to toss the min/max values, but why so
much difference in the mean?

What am I missing here?


ping -n 10 AAA.BBB.CCC.DDD ;

Pinging AAA.BBB.CCC.DDD with 32 bytes of data:
Reply from AAA.BBB.CCC.DDD: bytes=32 time=33ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47
Reply from AAA.BBB.CCC.DDD: bytes=32 time=29ms TTL=47

Ping statistics for AAA.BBB.CCC.DDD:
    Packets: Sent = 10, Received = 10, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 29ms, Maximum = 33ms, Average = 29ms



nping AAA.BBB.CCC.DDD

Starting Nping 0.6.25 ( http://nmap.org/nping ) at 2012-12-11 17:47 Ame
SENT (0.0940s) ICMP EEE.FFF.GGG.HHH > AAA.BBB.CCC.DDD Echo request
(type=8/code=0) ttl=64 id=60545 iplen=28
RCVD (0.1560s) ICMP AAA.BBB.CCC.DDD > EEE.FFF.GGG.HHH Echo reply
(type=0/code=0) ttl=47 id=55602 iplen=28
SENT (1.1240s) ICMP EEE.FFF.GGG.HHH > AAA.BBB.CCC.DDD Echo request
(type=8/code=0) ttl=64 id=60545 iplen=28
RCVD (1.1550s) ICMP AAA.BBB.CCC.DDD > EEE.FFF.GGG.HHH Echo reply
(type=0/code=0) ttl=47 id=55829 iplen=28
SENT (2.1380s) ICMP EEE.FFF.GGG.HHH > AAA.BBB.CCC.DDD Echo request
(type=8/code=0) ttl=64 id=60545 iplen=28
RCVD (2.1690s) ICMP AAA.BBB.CCC.DDD > EEE.FFF.GGG.HHH Echo reply
(type=0/code=0) ttl=47 id=56131 iplen=28
SENT (3.1520s) ICMP EEE.FFF.GGG.HHH > AAA.BBB.CCC.DDD Echo request
(type=8/code=0) ttl=64 id=60545 iplen=28
RCVD (3.1840s) ICMP AAA.BBB.CCC.DDD > EEE.FFF.GGG.HHH Echo reply
(type=0/code=0) ttl=47 id=56404 iplen=28
SENT (4.1670s) ICMP EEE.FFF.GGG.HHH > AAA.BBB.CCC.DDD Echo request
(type=8/code=0) ttl=64 id=60545 iplen=28
RCVD (4.1980s) ICMP AAA.BBB.CCC.DDD > EEE.FFF.GGG.HHH Echo reply
(type=0/code=0) ttl=47 id=56787 iplen=28

Max rtt: 47.000ms | Min rtt: 31.000ms | Avg rtt: 34.399ms
Raw packets sent: 5 (210B) | Rcvd: 5 (230B) | Lost: 0 (0.00%)
Tx time: 4.08900s | Tx bytes/s: 51.36 | Tx pkts/s: 1.22
Rx time: 4.12000s | Rx bytes/s: 55.83 | Rx pkts/s: 1.21
Nping done: 1 IP address pinged in 4.20 seconds


Keith
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/