Ted Unangst wrote:
> On 12/22/05, Han Boetes <[EMAIL PROTECTED]> wrote:
> > This problem has been bugging me for month now. It started
> > happening a month after 3.8 got tagged. At least, that's when I
> > started noticing it. So it might be anything. But I suspect the
> > OpenBSD side the most since returning to an older Linux release on
> > the client from a liveCD didn't fix the problem. The OpenBSD
> > server doesn't have a CD-drive.
> >
> > OpenBSD server <-> linux client
> > Both rtl8169 gigabit networkcards
> >
> > Uploading to the server goes with 11Mbytes/s, the speedlimit of
> > the ide harddrives, but the downloading goes with erratic
> > speeds. 1Mbyte/s at best, 100Kbyte/s most of the time, sometimes
> > no more than 20Kbytes/s
>
> and if you use a different protocol (ftp, http)?
Yes, I tried ftp and rsync over ssh and nfs. All three have the same problems.
> anything unusual in netstat -s?
Have a look:
ip:
1173210 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with header length < data size
0 with data length < header length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (duplicates or out of space)
0 malformed fragments dropped
0 fragments dropped after timeout
0 packets reassembled ok
1164892 packets for this host
0 packets for unknown/unsupported protocol
0 packets forwarded
0 packets not forwardable
0 redirects sent
1182870 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 fragment floods
0 packets with ip length > max ip packet size
0 tunneling packets that can't find gif
0 datagrams with bad address in header
311675 input datagrams checksum-processed by hardware
0 output datagrams checksum-processed by hardware
0 multicast packets which we don't join
icmp:
0 calls to icmp_error
0 errors not generated because old message was icmp
0 messages with bad code fields
0 messages < minimum length
0 bad checksums
0 messages with bad length
Input packet histogram:
destination unreachable: 115
0 message responses generated
igmp:
0 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent
ipencap:
0 total input packets
0 total output packets
0 packets shorter than header shows
0 packets dropped due to policy
0 packets with possibly spoofed local addresses
0 packets were dropped due to full output queue
0 input bytes
0 output bytes
0 protocol family mismatches
0 attempts to use tunnel with unspecified endpoint(s)
tcp:
878085 packets sent
458267 data packets (490187475 bytes)
1133 data packets (976692 bytes) retransmitted
0 fast retransmitted packets
362473 ack-only packets (294077 delayed)
0 URG only packets
0 window probe packets
54002 window update packets
2210 control packets
0 packets hardware-checksummed
860321 packets received
229685 acks (for 489089407 bytes)
16982 duplicate acks
0 acks for unsent data
0 acks for old data
469932 packets (416700992 bytes) received in-sequence
18457 completely duplicate packets (12118924 bytes)
44 old duplicate packets
1566 packets with some duplicate data (175713 bytes duplicated)
200639 out-of-order packets (153176788 bytes)
0 packets (0 bytes) of data after window
0 window probes
1109 window update packets
77 packets received after close
675 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
0 discarded for missing IPsec protection
0 discarded due to memory shortage
860321 packets hardware-checksummed
0 bad/missing md5 checksums
0 good md5 checksums
742 connection requests
32 connection accepts
353 connections established (including accepts)
764 connections closed (including 37 drops)
6 connections drained
58 embryonic connections dropped
197248 segments updated rtt (of 175442 attempts)
2040 retransmit timeouts
21 connections dropped by rexmit timeout
0 persist timeouts
0 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
21705 correct ACK header predictions
326160 correct data packet header predictions
334 PCB cache misses
13 ECN connections accepted
0 ECE packets received
9 CWR packets received
0 CE packets received
7137 ECT packets sent
0 ECE packets sent
94 CWR packets sent
cwr by fastrecovery: 927
cwr by timeout: 2040
cwr by ecn: 0
0 bad connection attempts
34 SYN cache entries added
0 hash collisions
32 completed
0 aborted (no space to build PCB)
1 timed out
0 dropped due to overflow
0 dropped due to bucket overflow
1 dropped due to RST
0 dropped due to ICMP unreachable
10 SYN,ACKs retransmitted
5 duplicate SYNs received for entries already in the cache
0 SYNs dropped (no route or no space)
927 SACK recovery episodes
854 segment rexmits in SACK recovery episodes
993037 byte rexmits in SACK recovery episodes
4052 SACK options received
262594 SACK options sent
udp:
304456 datagrams received
0 with incomplete header
0 with bad data length field
0 with bad checksum
0 with no checksum
303263 input packets hardware-checksummed
0 output packets hardware-checksummed
0 dropped due to no socket
0 broadcast/multicast datagrams dropped due to no socket
0 dropped due to missing IPsec protection
0 dropped due to full socket buffers
304456 delivered
304440 datagrams output
303469 missed PCB cache
esp:
0 input ESP packets
0 output ESP packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets with bad encryption received
0 packets that failed verification received
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 possibly replayed packets received
0 packets with bad payload size or padding received
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed crypto processing
0 input UDP encapsulated ESP packets
0 output UDP encapsulated ESP packets
0 UDP packets for non-encapsulating TDB received
0 input bytes
0 output bytes
ah:
0 input AH packets
0 output AH packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets that failed verification received
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 possibly replayed packets received
0 packets with bad authenticator length received
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed crypto processing
0 input bytes
0 output bytes
etherip:
0 packets shorter than header shows
0 packets were dropped due to full output queue
0 packets were dropped because of no interface/bridge information
0 packets dropped due to policy
0 packets dropped for other reasons
0 input ethernet-in-IP packets
0 output ethernet-in-IP packets
0 input bytes
0 output bytes
ipcomp:
0 input IPCOMP packets
0 output IPCOMP packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed (de)compression processing
0 packets less than minimum compression length
0 input bytes
0 output bytes
carp:
0 packets received (IPv4)
0 packets received (IPv6)
0 packets discarded for bad interface
0 packets discarded for wrong TTL
0 packets shorter than header
0 discarded for bad checksums
0 discarded packets with a bad version
0 discarded because packet too short
0 discarded for bad authentication
0 discarded for bad vhid
0 discarded because of a bad address list
0 packets sent (IPv4)
0 packets sent (IPv6)
0 send failed due to mbuf memory error
pfsync:
0 packets received (IPv4)
0 packets received (IPv6)
0 packets discarded for bad interface
0 packets discarded for bad ttl
0 packets shorter than header
0 packets discarded for bad version
0 packets discarded for bad HMAC
0 packets discarded for bad action
0 packets discarded for short packet
0 states discarded for bad values
0 stale states
0 failed state lookup/inserts
0 packets sent (IPv4)
0 packets sent (IPv6)
0 send failed due to mbuf memory error
0 send error
ip6:
0 total packets received
0 with size smaller than minimum
0 with data size < data length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (duplicates or out of space)
0 fragments dropped after timeout
0 fragments that exceeded limit
0 packets reassembled ok
0 packets for this host
0 packets forwarded
0 packets not forwardable
0 redirects sent
12 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 packets that violated scope rules
0 multicast packets which we don't join
Mbuf statistics:
0 one mbufs
0 one ext mbufs
0 two or more ext mbufs
0 packets whose headers are not continuous
0 tunneling packets that can't find gif
0 packets discarded due to too many headers
0 failures of source address selection
0 forward cache hit
0 forward cache miss
icmp6:
0 calls to icmp6_error
0 errors not generated because old message was icmp6 or so
0 errors not generated because of rate limitation
Output packet histogram:
multicast listener report: 10
neighbor solicitation: 2
0 messages with bad code fields
0 messages < minimum length
0 bad checksums
0 messages with bad length
Histogram of error messages to be generated:
0 no route
0 administratively prohibited
0 beyond scope
0 address unreachable
0 port unreachable
0 packet too big
0 time exceed transit
0 time exceed reassembly
0 erroneous header field
0 unrecognized next header
0 unrecognized option
0 redirect
0 unknown
0 message responses generated
0 messages with too many ND options
0 messages with bad ND options
0 bad neighbor solicitation messages
0 bad neighbor advertisement messages
0 bad router solicitation messages
0 bad router advertisement messages
0 bad redirect messages
0 path MTU changes
pim6:
0 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 messages received with bad version
0 registers received
0 bad registers received
0 registers sent
rip6:
0 messages received
0 checksum calculations on inbound
0 messages with bad checksum
0 messages dropped due to no socket
0 multicast messages dropped due to no socket
0 messages dropped due to full socket buffers
0 delivered
0 datagrams output
# Han
