Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Web Security: HTTP/HTTPS/FTP, IM/P2P, Web Filtering and Antivirus
Reload this Page Turning off P2P control results in packet loss
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-10-2009, 01:51 PM
Junior Member
  
Join Date: Jul 2009
Location: Zurich, Switzerland
Posts: 3
Default Turning off P2P control results in packet loss
I run an ASG 120 (7.306) in bridge mode. Today I discovered something very weird:
I noticed that the CPU load is almost constantly at 100%.
Then I turned off the P2P Control Status which brought the CPU load down quite some, but on the other hand, if I do a ping to a host on my subnet (on the other side of the Astaro bridge), I get packet loss of usually more than 80% to that specific host.
So I have to turn back on P2P control. The disadvantage is, that with that CPU load of constantly 100% I get ping response times of 40ms average to different hosts, which leads me to the point, where normal traffic is also being slowed down.

What could that be?

Best, steve
Reply With Quote
  #2 (permalink)  
Old 07-10-2009, 08:59 PM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 4,928
Default
Hi,
Check the IPS and PacketFilter logs, and see if the pings are getting dropped for a reason (such as ISMP flood protection).

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.3x, Dell PE1550 Dual PIII 1GHz, 1GB RAM, 2 NICs, 50-IP Platinum License
  • ASL 7.501, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #3 (permalink)  
Old 07-13-2009, 11:34 AM
Junior Member
  
Join Date: Jul 2009
Location: Zurich, Switzerland
Posts: 3
Default
Thanks, Barry.

I have checked the logs to find a reason for the drops but could not find anything indicating in this direction. IPS is currently turned off anyways.

How can I identify the reason for such a high load on the Astaro by the way?
It was up on 100% for almost the whole last 48 hours.
Reply With Quote
Reply

Tags
cpu, p2p

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 12:57 PM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.