From owner-freebsd-questions Wed Aug 7 15:20:31 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 217B637B400 for ; Wed, 7 Aug 2002 15:20:27 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8131343E4A for ; Wed, 7 Aug 2002 15:20:25 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk ([IPv6:::1]) by smtp.infracaninophile.co.uk (8.12.5/8.12.5) with ESMTP id g77MKNFo051428; Wed, 7 Aug 2002 23:20:23 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost) by happy-idiot-talk.infracaninophile.co.uk (8.12.5/8.12.5/Submit) id g77MKHPR051422; Wed, 7 Aug 2002 23:20:17 +0100 (BST) Date: Wed, 7 Aug 2002 23:20:17 +0100 From: Matthew Seaman To: Patrick Thomas Cc: freebsd-questions@FreeBSD.ORG Subject: Re: need tunings for a loaded freeBSD firewall Message-ID: <20020807222017.GA64024@happy-idiot-talk.infracaninophi> References: <20020807135406.O28830-100000@utility.clubscholarship.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020807135406.O28830-100000@utility.clubscholarship.com> User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Aug 07, 2002 at 02:03:22PM -0700, Patrick Thomas wrote: > The firewall has two interfaces and handles about 2megabits/second of > traffic on average. Recently, for reasons I cannot discern, it is choking > on traffic. Most ftp transfers run at 5-8 Kb/s (as opposed to 300-500 K) > and pings with large packet sizes drop a lot of packets. > > Small (normal) pings and general interactive response seem to be ok, but > again, file transfers are horrible, and pings with large sizes drop a lot > of packets. That sounds to me like hardware problems. Did you try swapping out the network cables? Does 'netstat -i' show any appreciable error counts for your interfaces? Any suspicious entries in /var/log/messages? If you run 'tcpdump' to monitor the traffic across an interface, do you see any truncated or malformed packets going past? Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way Tel: +44 1628 476614 Marlow Fax: +44 0870 0522645 Bucks., SL7 1TH UK To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message