Grandmaster All American 10829 Posts user info edit post |
I'm trying to narrow down this really weird network issue I'm having since I threw pfsense back up at home and disabled the WAN on tomato to use as wireless gateway (perhaps this is the root cause?). I'll drop a packet every now and then and my page loads either snap up instantly, or they screech to a 56k halt. Location of site has not shown important and neither has load. pipelining has been disabled for testing, but is currently re-enabled.
1 <1 ms <1 ms <1 ms 10.10.10.10 2 7 ms 7 ms 8 ms 10.10.10.10 3 19 ms 12 ms 14 ms bssr.suddenlink.net [66.76.* Is the 7ms a loop?
/confused
-- I can tap the 12meg connection at will with 5 or 6 usenet threads and other than the weird single packet drop every 10m (accidentally left -t running for days and only had maybe 5 the entire time) I don't really see degradation. Coincidentally, when I try to install 615KB firebug the xpi times out. I've also been having horrible luck with random smaller files on various mirror sites.
I have cloned my PC's MAC to jump on a different IP/Gateway and same results.
[Edited on May 5, 2009 at 10:01 AM. Reason : .] 5/5/2009 9:54:29 AM |
Shaggy All American 17820 Posts user info edit post |
heh, suddenlink more like suddenunlink
if 10.10.10.10 is you then remove devices until you find which one is causing problems. If 10.10.10.10 is your isp give them a call. Your modem may be bad 5/5/2009 10:46:51 AM |
Grandmaster All American 10829 Posts user info edit post |
I've actually had no problems whatsoever with suddenlink in greenville. 29.95 for 8M/512 and 44.95 12M/7xx
10.10 is the pfSense gateway and it used to be tomato (which I changed to 10.11)
Last night I was getting flooded with UDP 67 on a weird IP 10.230.0.x so pfSense was blocking it all by default. I added a similar virtual IP and I was able to ping it, but I couldn't use ARPing. Regardless I sniffed the IP and it looked to be trying to push a modem config file. V134001_vm1.1_d.cfg (actually googling this to see wtf was going on brought me to a community I should probably have never found)
So I added whatever rules needed to be added and it stopped, but this network problem persists. Maybe it's a bad NIC I'm using for the WAN, because I'd never even heard of FBSD name an interface vr0. The intels I have are dead or in use, but I have a shitty realtek somewhere I'll try tonight. 5/5/2009 11:09:34 AM |
Shaggy All American 17820 Posts user info edit post |
I've never used suddenlink i just thought it was funny cause of packet loss.
I would try changing the ip scheme to something other than 10.10.etc... like maybe 192.168. My guess is the 10.230 is your ISP trying to send firmware or config data to modems on their network. I have no idea how they do that stuff, so its just a guess. 5/5/2009 11:14:04 AM |
Grandmaster All American 10829 Posts user info edit post |
Yeah, I'd assumed it was their network as well. I've been fine for two years on 10.10.10.0/24 and I have a couple other pfSense boxes that don't have this duplicate hop. Maybe I'll just fall back on tomato once again for my home solution.
WTB embedded pfsense router.
----
a couple minutes sniffing the WAN yields a ton of ARP requests for 75.110.x with an equal amount of different gateways from what appears to be one of their routers Cisco_05:9a:05 --Is this normal?
[Edited on May 5, 2009 at 11:41 AM. Reason : .] 5/5/2009 11:26:14 AM |
Master_Yoda All American 3626 Posts user info edit post |
Quote : | "10.10 is the pfSense gateway and it used to be tomato (which I changed to 10.11)" |
your firewall has a loopback, and is to dump traffic id figure. Its seeing both that and the outbound.5/5/2009 8:00:51 PM |