RE: All-in-one box

2005-11-10 Thread Nickolay Kritsky
we are using DLINK quad-port 1000Mbit adapters(DFE-580). Them look like four `ste' interfaces to the system and look fine. Usenet and freebsd-* users were also saying that DFE-570 is even better, because they use DEC chips for networking which should be better. Never had a chance to test. AFAIK DFE

RE: tcpdump based packet generator

2005-09-30 Thread Nickolay Kritsky
combination of tcpdump and nemesis may do the trick Nick -Original Message- From: det_re [mailto:[EMAIL PROTECTED] Sent: Friday, September 30, 2005 7:53 AM To: freebsd-net@freebsd.org Subject: tcpdump based packet generator has anyone seen or implemented packet generator capable of read

RE: FREEBSD between two trunks

2005-06-06 Thread Nickolay Kritsky
There was an old funny thing about bridging vlans: if you bridge vlanXX interfaces without bridging parents - do not forget to put parent in up and promiscuous mode. For 4.6 kernel it also required some patching. What version are you running? Nick -Original Message- From: John-Mark Gurney

RE: cisco vpn experience?

2005-04-18 Thread Nickolay Kritsky
I had a an experience of connecting 4.9 to cisco 3600 with ESP/3des/Md5 site-to-site IPsec vpn with ISAKMP based on preshared key. Software used was racoon and isakmp. Nick -Original Message- From: Julian Elischer [mailto:[EMAIL PROTECTED] Sent: Saturday, April 16, 2005 3:19 AM To: [EMA

RE: multiple uplinks from ISP

2005-03-09 Thread Nickolay Kritsky
e can add short chapter about multipath routing in the handbook? Explaining if it is possible, and if not, why. -Original Message- From: mc [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 09, 2005 2:53 PM To: Nickolay Kritsky; freebsd-net@freebsd.org Subject: Re: multiple uplinks from ISP

RE: FreeBSD 4.x and OS-X tcp performance

2005-03-09 Thread Nickolay Kritsky
Here is my $0.02 I have seen such a problem with TCP flows between FreeBSD 4.5 and SUN servers. The same scenario - ACKs getting lost on the one side of the link, which was clearly seen on the tcpdumps taken on each sides at one time. I am not so good in theory, but as quick fix - setting Sun's

RE: multiple uplinks from ISP

2005-03-09 Thread Nickolay Kritsky
that you need is two equal-cost routes to your network on the ISP side. Remember the KISS idea :-) Nick -Original Message- From: mc [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 09, 2005 1:58 PM To: Nickolay Kritsky; freebsd-net@freebsd.org Subject: Re: multiple uplinks from ISP dst-ip

RE: multiple uplinks from ISP

2005-03-09 Thread Nickolay Kritsky
i.e. impossible to utilize 2*100=200Mbps. and...if I were really to use FEC as the solution, I will need to get some much expensive switches from cisco, which is quite unaffordable and imho unnecessary in fact... - Original Message - From: "Nickolay Kritsky" <[EMAIL P

RE: multiple uplinks from ISP

2005-03-09 Thread Nickolay Kritsky
hello I do not think you should mess a lot with interdomain routing here. Such a scenario (multiple uplinks from the same ISP) IMHO is better be solved on the layer 2. What you need is some technology that utilizes two Ethernet ports at once. About a week or two ago on this list was discussed s

RE: Does the Cisco PIX have an equivalent of the IPFW "fwd" action?

2005-02-03 Thread Nickolay Kritsky
Brett, I do not think that PIX has an equivalent of ipfw 'fwd' command. The fastest way, IMHO would be just set up your transparent web proxy as a default gateway for PIX. You can also try policy routing as described in this Usenet article: http://groups-beta.google.com/group/comp.dcom.sys.cisc

RE: dummynet and vr(4)/egress broken in 4.11 ?

2005-02-01 Thread Nickolay Kritsky
Are you using ipnat for NAT'ing? If yes, can you post your ipnat rules? Nick -Original Message- From: Jeremie Le Hen [mailto:[EMAIL PROTECTED] Sent: Sunday, January 30, 2005 5:40 PM To: freebsd-net@freebsd.org Subject: Re: dummynet and vr(4)/egress broken in 4.11 ? > I didn't changed my

RE: Network accounting

2005-01-26 Thread Nickolay Kritsky
I am using trafd and I am quite happy with it, if I dump internal tables to disk often enough. Nick -Original Message- From: Andrew Seguin [mailto:[EMAIL PROTECTED] Sent: Monday, January 17, 2005 11:11 PM To: freebsd-net@freebsd.org Subject: Network accounting I’ve searched Google, I’v

RE: Using aliased IPs for outbound requests

2005-01-26 Thread Nickolay Kritsky
See documentation for squid. It has such option. I cannot look into config file right now, but I remember that I have used it successfully. -Original Message- From: Mike Wesson [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 18, 2005 12:44 AM To: freebsd-net@freebsd.org Subject: Using al

RE: gif(4) and bpf(4)

2005-01-26 Thread Nickolay Kritsky
Hi Jeremie. Please tell me more about your problem: is it that tcpdump cannot attach to device, or it shows no packets when you are sure there is traffic on the gif(4) interface, or something else? If there is some error report - send it here. Please check that you have free bpf device :-) . Wh

RE: gif(4) and bpf(4)

2005-01-26 Thread Nickolay Kritsky
Please do the following: ping -r -S 192.168.1.1 192.168.4.13 >/dev/null 2>&1 & netstat -I gif0 -w 1 and see if any packets are counted. If you are using IPSec, maybe your packets are encrypted before they go to gif. See this article: http://groups-beta.google.com/group/sol.lists.freebsd.net/brows