From owner-freebsd-ipfw@FreeBSD.ORG Wed Nov 29 16:37:42 2006 Return-Path: X-Original-To: freebsd-ipfw@freebsd.org Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5687016A403 for ; Wed, 29 Nov 2006 16:37:42 +0000 (UTC) (envelope-from donald.teed@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.170]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6AD7143CCC for ; Wed, 29 Nov 2006 16:36:49 +0000 (GMT) (envelope-from donald.teed@gmail.com) Received: by ug-out-1314.google.com with SMTP id o2so1674288uge for ; Wed, 29 Nov 2006 08:36:46 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=B6mOOE0hpavt268ofiE3R7PbWj7mzWnyp1PkC5y2JwlD192JH8MNNdR3J/wVNbwB8B5F3A0GSEhQ+3JvLkgQ7y7HlecqRLJ0WK+QAj+vgopMG8fKUFyy2ZuMNhnWjyrHExOkKRkz8wtGLglOntkQRN6ZFDX1k/nMaXi9dlfTRy8= Received: by 10.78.180.18 with SMTP id c18mr2435146huf.1164818205399; Wed, 29 Nov 2006 08:36:45 -0800 (PST) Received: by 10.78.161.15 with HTTP; Wed, 29 Nov 2006 08:36:45 -0800 (PST) Message-ID: Date: Wed, 29 Nov 2006 12:36:45 -0400 From: "D G Teed" To: "Ian FREISLICH" In-Reply-To: MIME-Version: 1.0 References: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-ipfw@freebsd.org, AT Matik Subject: Re: how to go about diagnosing cause of packet loss X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Nov 2006 16:37:42 -0000 Hi, With some further experimentation, I've concluded that the real problem is ipaudit. It cannot keep up with the bandwidth we have. When it is off, there is next to no packet loss. Thanks for the reply... --Donald On 11/29/06, Ian FREISLICH wrote: > > "D G Teed" wrote: > > Hi, > > > > OK, I think you've helped us prove that ipfw isn't the issue. > > The packet loss remained with rule 01 of allow ip from any > > to any. We'll need to measure our bandwidth > > processed on the box. Thanks for the help. > > What version of FreeBSD are you running. I've been experiencing > wierd packet loss recently, which I suspect is a result of arp > wierdness or routing table largness. It's a CURRENT box, ~1000 > hosts behind it, ~1900 routes - not large by any stretch of the > imagination. Packet loss doesn't seem related to bandwidth. > > Ian > > -- > Ian Freislich >