Would that require tcpdump on the firewall? or could I run tcpdump somewhere else on the network? I'm trying to keep as many tools off the firewall as possible. But I'll put tcpdump into the distro for testing. bert hubert wrote: >On Wed, Jan 02, 2002 at 10:20:03AM -0600, Jason A. Pattie wrote: > >>I think I have an issue with the Wonder Shaper script. I setup my >>firewall to use the Wonder Shaper script with HTB (instead of CBQ). My >>firewall has Squid running in transparent proxy mode, but I setup my >>browser to point to port 3128 (default Squid port). I ran a ping >>session to www.yahoo.com and did an SSH at the same time that I >>downloaded the Linux kernel (~20MB). It appears that most (if not all) >>of the traffic is being placed into the high priority class (queue? >>don't really know the difference yet) 10:. Isn't it supposed to go to >>20: if it's not SSH or ICMP or ACK packets? Here are the ping times >>from Yahoo! while doing the kernel download: >> > >tcpdump a bit - it may be that squid is misbehaving and giving its traffic >'minimum delay' TOS! > >tcpdump -n -v -v > >Regards, > >bert > -- Jason A. Pattie pattieja@pcxperience.com
