Where in the output of tcdump does the TOS field appear? I did the 'tcpdump -n -v -v' on the firewall and dumped the output to a file as I started the Linux kernel download. Is it appropriate to attach the output (I stopped it after around 250 packets)? bert hubert wrote: >On Wed, Jan 02, 2002 at 10:20:03AM -0600, Jason A. Pattie wrote: > >>I think I have an issue with the Wonder Shaper script. I setup my >>firewall to use the Wonder Shaper script with HTB (instead of CBQ). My >>firewall has Squid running in transparent proxy mode, but I setup my >>browser to point to port 3128 (default Squid port). I ran a ping >>session to www.yahoo.com and did an SSH at the same time that I >>downloaded the Linux kernel (~20MB). It appears that most (if not all) >>of the traffic is being placed into the high priority class (queue? >>don't really know the difference yet) 10:. Isn't it supposed to go to >>20: if it's not SSH or ICMP or ACK packets? Here are the ping times >>from Yahoo! while doing the kernel download: >> > >tcpdump a bit - it may be that squid is misbehaving and giving its traffic >'minimum delay' TOS! > >tcpdump -n -v -v > >Regards, > >bert > -- Jason A. Pattie pattieja@pcxperience.com