-----Original Message----- From: Teemu Korpela [mailto:tkorpela@xxxxxxxxxxxx] Sent: Thursday, December 04, 2003 9:17 PM To: Greg Freeman Subject: RE: Linux QOS help On Thu, 4 Dec 2003 08:47:27 -0900, Greg Freeman wrote > Looking at the support report on the firewall (list all sorts of > stuff) I saw this.. > > ifconfig -a > eth0 Link encap:Ethernet HWaddr 00:D0:CF:01:A6:52 > inet addr:10.0.0.1 Bcast:10.0.0.255 Mask:255.255.255.0 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:20061386 errors:206047 dropped:5857547 > overruns:138637 frame:0 > TX packets:8390751 errors:0 dropped:0 overruns:1 carrier:0 > collisions:0 txqueuelen:100 > Interrupt:5 > > Note the number of errors on this Lan interface, these are read errors? > Is it common to have this many of dropped and overrun packets on a LAN > side? It's not common. I just checked one linux router with half-duplex and another with full-duplex ethernet connection and error counters were zero (except half-duplex interface which had small amount of collisions, but that's normal). Both routers have been running several months now. Maybe your problems is this and not QOS-troubles? The amount of errors and dropped frames is way too high compared to amount of received frames and there is packet loss. One reason for this might be excessive CPU load when you are using ipsec and transferring bulk data like files across the link. CPU time shortage causes dropping of ethernet frames when receiving. What hardware are you using in corp side firewall? -- Teemu _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/