Re: gre tunnel & ipsec transport mode

2003-12-17 Thread Helge Oldach
Eric Masson: >I'm experimenting dynamic routing protocols in a vpn setup. Ipsec tunnel >mode is not applicable here as selectors do not appear in system routing >table. I think the problem is that you need multicasts to exchange routing updates through the tunnel. If I am not mistaken that is supp

Polling CPU usage

2003-12-17 Thread Markus Oestreicher
Good Day, One firewall I have access to uses polling(4) to forward traffic between two fxp interfaces. (4.9-STABLE) When forwarding at ~70 Mbps top still shows 100% idle time as the polling(4) code runs in the system's idle process. Is there a way to get the real processor usage including the ti

Re: gre tunnel & ipsec transport mode

2003-12-17 Thread Eric Masson
> "Helge" == Helge Oldach <[EMAIL PROTECTED]> writes: Hello Helge, Helge> I think the problem is that you need multicasts to exchange Helge> routing updates through the tunnel. If I am not mistaken that is Helge> supported with gif interfaces as well. Maybe you could do away Helge> with g

Re: suffering from poor network performance...

2003-12-17 Thread Bill Vermillion
On Tue, Dec 16, 2003 at 17:58 , while impersonating an expert on the internet, Alex sent this to stdout: > First, I know very little about networking, especially > performance turning. I would really like to learn more but don't > know where/how to start effectively. > I have a small home networ

Re: gre tunnel & ipsec transport mode

2003-12-17 Thread Bruce M Simpson
On Wed, Dec 17, 2003 at 03:01:53PM +0100, Eric Masson wrote: > Helge> I think the problem is that you need multicasts to exchange > Helge> routing updates through the tunnel. If I am not mistaken that is > Helge> supported with gif interfaces as well. Maybe you could do away > Helge> with gif?

Re: gre tunnel & ipsec transport mode

2003-12-17 Thread Eric Masson
> "Bruce" == Bruce M Simpson writes: Bruce> Same here. I'm willing to take maintainership of gre(4) as I've Bruce> written one before and have been committing to it. Great. Bruce> If someone can reproduce the problems people have encountered, Bruce> I'm all ears. All my production mach

change the MAC on an vlan interface

2003-12-17 Thread Schlothauer, Martin
Hello, I tried to use freevrrpd on an vlan interface and had trouble. When i change the MAC on the vlan interface i lost packets. After restoring the MAC it works again. A simple test whith ifconfig and 3 ping-packets shows the problem. After the first packet i have done # ifconfig vlan0 ether

Re: suffering from poor network performance...

2003-12-17 Thread Charles Swiger
On Dec 17, 2003, at 9:34 AM, Bill Vermillion wrote: I've not tried the ping but I'm seeing exceptionally poor performance on G4s to FreeBSD. The G4's can ftp to each other at about 8-9MB/sec, as can the FreeBSDs. They are on a Cisco 2948 switch. But ftp from BSD to G4 is in the order of 20-40KB/

Re: suffering from poor network performance...

2003-12-17 Thread Wes Peters
On Tuesday 16 December 2003 03:35 pm, Charles Swiger wrote: > On Dec 16, 2003, at 5:58 PM, Alex (ander Sendzimir) wrote: > > I have a small home network with a PowerBook G4 and FBSD 4.9-STABLE > > connected through a Netgear DS108 hub (10/100). > > If the device works at both 10 and 100 speed, it's