From owner-freebsd-net@FreeBSD.ORG Mon Nov 14 04:25:31 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B22BB10656B7 for ; Mon, 14 Nov 2011 04:25:31 +0000 (UTC) (envelope-from remy.sanchez@hyperthese.net) Received: from relay3-d.mail.gandi.net (relay3-d.mail.gandi.net [217.70.183.195]) by mx1.freebsd.org (Postfix) with ESMTP id 6A8788FC21 for ; Mon, 14 Nov 2011 04:25:31 +0000 (UTC) Received: from magi.localnet (unknown [IPv6:2a01:e35:2e3d:8820:21f:16ff:feb6:9aac]) (Authenticated sender: remy.sanchez@hyperthese.net) by relay3-d.mail.gandi.net (Postfix) with ESMTPSA id DEBC8A8AEC for ; Mon, 14 Nov 2011 05:25:19 +0100 (CET) From: =?iso-8859-1?q?R=E9my_Sanchez?= To: freebsd-net@freebsd.org Date: Mon, 14 Nov 2011 05:24:58 +0100 User-Agent: KMail/1.13.7 (Linux/3.0.0-2-amd64; KDE/4.6.5; x86_64; ; ) References: <4EC033B7.5080609@soe.ucsc.edu> <4EC05F58.1050103@soe.ucsc.edu> <4EC061C7.1040406@soe.ucsc.edu> In-Reply-To: <4EC061C7.1040406@soe.ucsc.edu> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2703490.FKZ5JMMmkU"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <201111140525.14450.remy.sanchez@hyperthese.net> Subject: Re: Arg. TCP slow start killing me. X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Nov 2011 04:25:31 -0000 --nextPart2703490.FKZ5JMMmkU Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Monday 14 November 2011 01:33:11 Erich Weiler wrote: > Actually, another question might be: How can I prove that my firewall=20 > really is dropping packets in transit, as it forwards them on? Is there= =20 > some sysctl oid that would show dropped packets, so some netstat counter= =20 > I can look at? I'll say something stupid, but in the worst case just use tcpdump to captur= e=20 both of your interfaces, and then compare them, one way or the other... A quick google of "pcap diff" gives some results, like=20 http://sourceforge.net/projects/tpcat/ =2D-=20 R=E9my Sanchez http://hyperthese.net/ --nextPart2703490.FKZ5JMMmkU Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEABECAAYFAk7AmBoACgkQpMMQ4XyIN1ZOAwCeNmnLakJLy8fl+vXl8NY9hMIK XugAoKbrZl63Ol1d3iGeSaNwBduJvU5W =TTnU -----END PGP SIGNATURE----- --nextPart2703490.FKZ5JMMmkU--