Re: Global Blackhole Service

2009-02-15 Thread Jens Ott - PlusServer AG
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Paul Vixie schrieb: > a minor editorial comment: > > Jens Ott - PlusServer AG writes: > >> Jack Bates schrieb: >>> Paul Vixie wrote: >>> >>> Do you have a miraculous way to stop DDOS? Is there now a way to quickly >>> and efficiently track dow

Re: Linux Router: TCP slow, UDP fast

2009-02-15 Thread Chris
Thanks, Karl, Allen and Nickola. I failed-over to another router last night and briefly had full expected throughput but this morning despite dropping providers and moving between routers again for trial and error I still see _outbound_ TCP at about the same 300 - 600kbps per session. I eliminated

Re: Linux Router: TCP slow, UDP fast

2009-02-15 Thread Mathias Wolkert
I would turn off ethernet flow control. Maybe you already have. It can be really mean on tcp's own flow control if the switch has an issue of some kind (load). /Tias 15 feb 2009 kl. 10.24 skrev Chris : Thanks, Karl, Allen and Nickola. I failed-over to another router last night and briefly

Re: Linux Router: TCP slow, UDP fast

2009-02-15 Thread Chris
Thanks for the suggestions everyone. I've got to the bottom of the problem now (I'm sure there will be a collective sigh of relief from the list because of the noise this thread generated :-)). I installed two brand new, low spec, 3Com switches one at the 'front' of the network and one 'behind' th

Re: Linux Router: TCP slow, UDP fast

2009-02-15 Thread Geert Bosch
On Feb 15, 2009, at 04:24, Chris wrote: Any last ideas appreciated before causing headaches removing switches would be appreciated. The TCP offloading should be suspect. Any current PC hardware should be able to deal with huge amounts of traffic without any offloading. Start with turning that

Re: Global Blackhole Service

2009-02-15 Thread Randy Bush
Paul Vixie wrote: > the quoted text was written by jack bates, not paul vixie. the problem of misattributed quotations is greatly exacerbated by those who do not clearly attribute the text(s) they are quoting. randy

Re: Global Blackhole Service

2009-02-15 Thread Michael Thomas
[] I keep reading this subject as "Global Backhoe Service", ie, the sworn enemy of NANOG :) Mike

Re: Global Blackhole Service

2009-02-15 Thread Marshall Eubanks
On Feb 15, 2009, at 1:46 PM, Michael Thomas wrote: [] I keep reading this subject as "Global Backhoe Service", ie, the sworn enemy of NANOG :) Why ? At the Global Backhoe Service your dues will go to our initiative to place an iPhone running Google latitude on every backhoe on the plane

cogent issues

2009-02-15 Thread John Martinez
Has anyone opened a ticket with Cogent? Their packet loss is reaching ~10%. http://www.internetpulse.net

Capture problems with Intel quad cards?

2009-02-15 Thread John A. Kilpatrick
Has anyone had problems with using current Intel quad ethernet cards for packet capture? As a proof-of-concept test we bought an Intel PWLA8494GT and hooked it up to some Network Critical taps. There was a very strange issue with corruption of the captured packets. The *only* issue (but it'