Re: Application layer classifier for ipfw

2008-08-19 Thread Daniel Dias Gonçalves
Ermal Luçi escreveu: On Sat, Aug 2, 2008 at 3:00 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: Mike Makonnen wrote: Patrick Tracanelli wrote: To let you know of my current (real world) tests: - Wireless Internet Provider 1: - 4Mbit/s of Internet Traffic - Classifying defau

Re: Application layer classifier for ipfw

2008-08-08 Thread Ermal Luçi
On Sat, Aug 2, 2008 at 3:00 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: > Mike Makonnen wrote: >> >> Patrick Tracanelli wrote: >>> >>> To let you know of my current (real world) tests: >>> >>> - Wireless Internet Provider 1: >>>- 4Mbit/s of Internet Traffic >>>- Classifying default protoco

Re: Application layer classifier for ipfw

2008-08-05 Thread Patrick Tracanelli
Patrick Tracanelli escreveu: Mike Makonnen escreveu: Mike Makonnen wrote: Patrick Tracanelli wrote: To let you know of my current (real world) tests: - Wireless Internet Provider 1: - 4Mbit/s of Internet Traffic - Classifying default protocols + soulseek + ssh - Classifying 100Mb

Re: Application layer classifier for ipfw

2008-08-04 Thread Patrick Tracanelli
Mike Makonnen escreveu: Mike Makonnen wrote: Patrick Tracanelli wrote: To let you know of my current (real world) tests: - Wireless Internet Provider 1: - 4Mbit/s of Internet Traffic - Classifying default protocols + soulseek + ssh - Classifying 100Mbit/s of dump over ssh Results

Re: Application layer classifier for ipfw

2008-08-03 Thread Ian Smith
On Sun, 3 Aug 2008, Mike Makonnen wrote: > Ian Smith wrote: > > On Fri, 1 Aug 2008, Mike Makonnen wrote: > > > Patrick Tracanelli wrote: > > > > Mike Makonnen escreveu: [..] > > /* > > * Inform divert(4) what rule to send it to by > > * mod

Re: Application layer classifier for ipfw

2008-08-03 Thread Mike Makonnen
Ian Smith wrote: On Fri, 1 Aug 2008, Mike Makonnen wrote: > Patrick Tracanelli wrote: > > Mike Makonnen escreveu: > >> Hi, > >> > >> An Internet Cafe I do some work for was recently having problems with > >> very slow internet access. It turns out customers were running P2P > >> file sha

Re: Application layer classifier for ipfw

2008-08-02 Thread Mike Makonnen
Mike Makonnen wrote: Patrick Tracanelli wrote: To let you know of my current (real world) tests: - Wireless Internet Provider 1: - 4Mbit/s of Internet Traffic - Classifying default protocols + soulseek + ssh - Classifying 100Mbit/s of dump over ssh Results in: No latency added

Re: Application layer classifier for ipfw

2008-08-02 Thread Ian Smith
On Fri, 1 Aug 2008, Mike Makonnen wrote: > Patrick Tracanelli wrote: > > Mike Makonnen escreveu: > >> Hi, > >> > >> An Internet Cafe I do some work for was recently having problems with > >> very slow internet access. It turns out customers were running P2P > >> file sharing applications w

Re: Application layer classifier for ipfw

2008-08-02 Thread Ermal Luçi
One thing, can you please make the SYN/ACK table optional since on pf(4) you have the info from the state table when a tcp connection is established. On Sat, Aug 2, 2008 at 1:34 PM, Ermal Luçi <[EMAIL PROTECTED]> wrote: > On Sat, Aug 2, 2008 at 1:33 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: >>

Re: Application layer classifier for ipfw

2008-08-02 Thread Ermal Luçi
On Sat, Aug 2, 2008 at 1:33 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: > Patrick Tracanelli wrote: >> >> eculp escreveu: >>> >>> Quoting Mike Makonnen <[EMAIL PROTECTED]>: >>> Daniel Dias Gonçalves wrote: > > You will go to develop a version to work with PF ? > I don't know

Re: Application layer classifier for ipfw

2008-08-02 Thread Mike Makonnen
Patrick Tracanelli wrote: eculp escreveu: Quoting Mike Makonnen <[EMAIL PROTECTED]>: Daniel Dias Gonçalves wrote: You will go to develop a version to work with PF ? I don't know what's needed to get it to work with pf, but if it's not too much work, sure. That would be great, Mike. I'm

Re: Application layer classifier for ipfw

2008-08-02 Thread Mike Makonnen
Ermal Luçi wrote: On Fri, Aug 1, 2008 at 12:21 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: Ermal Luçi wrote: Thanks for this. I have a question, you remove a flow from if you see a FIN for the TCP case and only on overlapping flow for either TCP/UDP how do the other flows expire i am m

Re: Application layer classifier for ipfw

2008-08-02 Thread Mike Makonnen
Patrick Tracanelli wrote: To let you know of my current (real world) tests: - Wireless Internet Provider 1: - 4Mbit/s of Internet Traffic - Classifying default protocols + soulseek + ssh - Classifying 100Mbit/s of dump over ssh Results in: No latency added, very low CPU usage,

Re: Application layer classifier for ipfw

2008-08-01 Thread Patrick Tracanelli
Julian Elischer escreveu: Patrick Tracanelli wrote: Mike Makonnen escreveu: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked f

Re: Application layer classifier for ipfw

2008-08-01 Thread Ermal Luçi
On Fri, Aug 1, 2008 at 12:21 PM, Mike Makonnen <[EMAIL PROTECTED]> wrote: > Ermal Luçi wrote: >>> >>> Hi, >>> >>> An Internet Cafe I do some work for was recently having problems with >>> very slow internet access. It turns out customers were running P2P file >>> sharing applications which were hog

Re: Application layer classifier for ipfw

2008-08-01 Thread Patrick Tracanelli
eculp escreveu: Quoting Mike Makonnen <[EMAIL PROTECTED]>: Daniel Dias Gonçalves wrote: You will go to develop a version to work with PF ? I don't know what's needed to get it to work with pf, but if it's not too much work, sure. That would be great, Mike. I'm seeing more and more bandwid

Re: Application layer classifier for ipfw

2008-08-01 Thread eculp
Quoting Mike Makonnen <[EMAIL PROTECTED]>: Daniel Dias Gonçalves wrote: You will go to develop a version to work with PF ? I don't know what's needed to get it to work with pf, but if it's not too much work, sure. That would be great, Mike. I'm seeing more and more bandwidth being used w

Re: Application layer classifier for ipfw

2008-08-01 Thread Patrick Tracanelli
Petri Helenius escreveu: Patrick Tracanelli wrote: I have raised the queue lenght a lot, up to 40960, and the behavior was the same. Ill keep trying and let you know if any success. No queue depth is going to help you if you receive more data than you can process. Pete From here, where

Re: Application layer classifier for ipfw

2008-08-01 Thread Petri Helenius
Patrick Tracanelli wrote: I have raised the queue lenght a lot, up to 40960, and the behavior was the same. Ill keep trying and let you know if any success. No queue depth is going to help you if you receive more data than you can process. Pete

Re: Application layer classifier for ipfw

2008-08-01 Thread Patrick Tracanelli
Patrick Tracanelli escreveu: I guess I need some help here. How can I increase (and what should I be aware) the input queue? Under 20Mbit/s of load, I have the following problem: Aug 1 11:14:45 ourofino last message repeated 5828 times Aug 1 11:14:45 ourofino ipfw-classifyd: MATCH edonkey(50

Re: Application layer classifier for ipfw

2008-08-01 Thread Patrick Tracanelli
I guess I need some help here. How can I increase (and what should I be aware) the input queue? Under 20Mbit/s of load, I have the following problem: Aug 1 11:14:45 ourofino last message repeated 5828 times Aug 1 11:14:45 ourofino ipfw-classifyd: MATCH edonkey(5): 88.165.54.165:50286 ->

Re: Application layer classifier for ipfw

2008-08-01 Thread Mike Makonnen
Patrick Tracanelli wrote: Mike Makonnen escreveu: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for programs that would all

Re: Application layer classifier for ipfw

2008-08-01 Thread Mike Makonnen
Daniel Dias Gonçalves wrote: You will go to develop a version to work with PF ? I don't know what's needed to get it to work with pf, but if it's not too much work, sure. Cheers. -- Mike Makonnen | GPG-KEY: http://people.freebsd.org/~mtm/mtm.asc mtm @ FreeBSD.Org | AC7B 5672 2D11 F4D0

Re: Application layer classifier for ipfw

2008-08-01 Thread Mike Makonnen
Ermal Luçi wrote: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic according to

Re: Application layer classifier for ipfw

2008-07-31 Thread Norberto Meijome
On Thu, 31 Jul 2008 14:18:31 -0700 Julian Elischer <[EMAIL PROTECTED]> wrote: > Paolo Pisati wrote: > > On Thu, Jul 31, 2008 at 01:02:29PM +0300, Mike Makonnen wrote: > >> While I have not done extensive testing, preliminary tests are encouraging > >> and it seems to work, so I thought I'd anno

Re: Application layer classifier for ipfw

2008-07-31 Thread Julian Elischer
Patrick Tracanelli wrote: Mike Makonnen escreveu: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for programs that would all

Re: Application layer classifier for ipfw

2008-07-31 Thread Julian Elischer
Paolo Pisati wrote: On Thu, Jul 31, 2008 at 01:02:29PM +0300, Mike Makonnen wrote: While I have not done extensive testing, preliminary tests are encouraging and it seems to work, so I thought I'd announce it to the rest of the world in case anyone else is interested in this kind of application

Re: Application layer classifier for ipfw

2008-07-31 Thread Daniel Dias Gonçalves
You will go to develop a version to work with PF ? Mike Makonnen escreveu: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for

Re: Application layer classifier for ipfw

2008-07-31 Thread Ermal Luçi
> Hi, > > An Internet Cafe I do some work for was recently having problems with > very slow internet access. It turns out customers were running P2P file > sharing applications which were hogging all the bandwidth. I looked for > programs that would allow me to shape traffic according to the > app

Re: Application layer classifier for ipfw

2008-07-31 Thread Patrick Tracanelli
Mike Makonnen escreveu: Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic acco

Re: Application layer classifier for ipfw

2008-07-31 Thread Lawrence Stewart
Mike Makonnen wrote: Lawrence Stewart wrote: Hi Mike, Mike Makonnen wrote: [snip] sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic according to the application layer protocol, but couldn't find any for FreeBSD. I found a

Re: Application layer classifier for ipfw

2008-07-31 Thread Mike Makonnen
Lawrence Stewart wrote: Hi Mike, Mike Makonnen wrote: [snip] sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic according to the application layer protocol, but couldn't find any for FreeBSD. I found a couple: l7-filter and

Re: Application layer classifier for ipfw

2008-07-31 Thread Lawrence Stewart
Hi Mike, Mike Makonnen wrote: [snip] sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic according to the application layer protocol, but couldn't find any for FreeBSD. I found a couple: l7-filter and ipp2p, but these are Lin

Re: Application layer classifier for ipfw

2008-07-31 Thread Paolo Pisati
On Thu, Jul 31, 2008 at 01:02:29PM +0300, Mike Makonnen wrote: > > While I have not done extensive testing, preliminary tests are encouraging > and it seems to work, so I thought I'd announce it to the rest of the world > in case anyone else is interested in this kind of application. That's a m

Application layer classifier for ipfw

2008-07-31 Thread Mike Makonnen
Hi, An Internet Cafe I do some work for was recently having problems with very slow internet access. It turns out customers were running P2P file sharing applications which were hogging all the bandwidth. I looked for programs that would allow me to shape traffic according to the application