Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 


14 posts

Geek
Inactive user


  Reply # 671995 13-Aug-2012 21:57 Send private message

So I need to test my phone cable then?  How do I do that?

Just A Geek
1940 posts

Uber Geek
+1 received by user: 310

Trusted
Subscriber

  Reply # 671996 13-Aug-2012 21:59 Send private message

whats the output of ...

show ip inspect statistics

and

show configuration | include ip inspect






14 posts

Geek
Inactive user


  Reply # 672003 13-Aug-2012 22:04 Send private message

Packet inspection statistics [process switch:fast switch]
  tcp packets: [3765:1087030]
  udp packets: [1694:8]
   packets: [76:2815]
  http packets: [1487:594287]
  sip packets: [104:0]
Interfaces configured for inspection 1
Session creations since subsystem startup or last reset 2518
Current session counts (estab/half-open/terminating) [4:0:0]
Maxever session counts (estab/half-open/terminating) [64:22:6]
Last session created 00:00:43
Last statistic reset never
Last session creation rate 1
Maxever session creation rate 156
Last half-open session total 0
TCP reassembly statistics
  received 58430 packets out-of-order; dropped 3413
  peak memory usage 98 KB; current usage: 0 KB
  peak queue length 16

===

ip inspect audit-trail
ip inspect name WAN_FW appfw WAN_FW
ip inspect name WAN_FW icmp alert on audit-trail on router-traffic
ip inspect name WAN_FW fragment maximum 256 timeout 1
ip inspect name WAN_FW dns alert on audit-trail on
ip inspect name WAN_FW ddns-v3
ip inspect name WAN_FW ftp alert on audit-trail on
ip inspect name WAN_FW ftps alert on audit-trail on
ip inspect name WAN_FW http
ip inspect name WAN_FW https
ip inspect name WAN_FW esmtp alert on audit-trail on
ip inspect name WAN_FW imap
ip inspect name WAN_FW imap3
ip inspect name WAN_FW imaps
ip inspect name WAN_FW pop3
ip inspect name WAN_FW pop3s
ip inspect name WAN_FW ntp
ip inspect name WAN_FW sip
ip inspect name WAN_FW sip-tls
ip inspect name WAN_FW snmp
ip inspect name WAN_FW snmptrap
ip inspect name WAN_FW rcmd
ip inspect name WAN_FW syslog
ip inspect name WAN_FW syslog-conn
ip inspect name WAN_FW tcp alert on audit-trail on router-traffic
ip inspect name WAN_FW udp alert on audit-trail on router-traffic
 ip inspect WAN_FW in
 ip inspect WAN_FW out



14 posts

Geek
Inactive user


  Reply # 672011 13-Aug-2012 22:17 Send private message

Is there something wrong with my modem configuration?

1152 posts

Uber Geek
+1 received by user: 135


  Reply # 672021 13-Aug-2012 22:34 Send private message

If it's the rain all you can do is wait for things to dry out, if it doesn't fix itself then maybe call your isp and they can send out a chorus tech.

But try a different modem first, they're less than $100, vodafone might evem send you out one free if you sign a contract.













Just A Geek
1940 posts

Uber Geek
+1 received by user: 310

Trusted
Subscriber

  Reply # 672023 13-Aug-2012 22:36 Send private message

IMHO a little excessive in the firewalling .. :)

The little cisco's (even the larger ones) could max out in CPU/Thuput with excessive inspects

You are dropping packets a little due to packets being out of sync..

increase them a little

ip inspect tcp reassembly queue length 1024 (or something not so large)

ip inspect name WAN_FW appfw WAN_FW <-- a little strange.. remove it .. unless you have appfw defined called WAN_FW ???

Yes you do have a low connection rate and maybe errors? do you have interleaving on/off? (which might fix the errors if you do) . Tried looking at getting your line checked?









14 posts

Geek
Inactive user


  Reply # 672509 14-Aug-2012 21:23 Send private message

LennonNZ: IMHO a little excessive in the firewalling .. :)


... call me paranoid... I like to see what's going on, plus the router can handle it.

Session audit trail is enabled
Session alert is enabled
one-minute (sampling period) thresholds are [unlimited : unlimited] connections
max-incomplete sessions thresholds are [unlimited : unlimited]
max-incomplete tcp connections per host is unlimited. Block-time 0 minute.
tcp synwait-time is 30 sec -- tcp finwait-time is 5 sec
tcp idle-time is 3600 sec -- udp idle-time is 30 sec
tcp reassembly queue length 16; timeout 5 sec; memory-limit 1024 kilo bytes
dns-timeout is 5 sec
Inspection Rule Configuration
Inspection name WAN_FW
icmp alert is on audit-trail is on timeout 10
inspection of router local traffic is enabled
fragment Maximum 256 In Use 0 alert is on audit-trail is on timeout 1
dns alert is on audit-trail is on timeout 30
ddns-v3 alert is on audit-trail is on timeout 30
ftp alert is on audit-trail is on timeout 3600
ftps alert is on audit-trail is on timeout 3600
Application Policy name WAN_FW
Application http
strict-http action allow alarm
content-type-verification unknown-type match-req-rsp action allow alarm
port-misuse tunneling action allow alarm
transfer-encoding compress action allow alarm
transfer-encoding identity action allow alarm
transfer-encoding chunked action allow alarm
transfer-encoding gzip action allow alarm
transfer-encoding deflate action allow alarm
audit-trail is enabled
http alert is on audit-trail is on timeout 3600
https alert is on audit-trail is on timeout 3600
esmtp max-data 20000000 alert is on audit-trail is on timeout 3600
imap alert is on audit-trail is on timeout 3600
imap3 alert is on audit-trail is on timeout 3600
imaps alert is on audit-trail is on timeout 3600
pop3 alert is on audit-trail is on timeout 3600
pop3s alert is on audit-trail is on timeout 3600
ntp alert is on audit-trail is on timeout 30
sip alert is on audit-trail is on timeout 30
sip-tls alert is on audit-trail is on timeout 30
snmp alert is on audit-trail is on timeout 30
snmptrap alert is on audit-trail is on timeout 30
rcmd alert is on audit-trail is on timeout 3600
syslog alert is on audit-trail is on timeout 30
syslog-conn alert is on audit-trail is on timeout 3600
tcp alert is on audit-trail is on timeout 3600
inspection of router local traffic is enabled
udp alert is on audit-trail is on timeout 30
inspection of router local traffic is enabled

so queue length is 16 (assuming this is the default as I've never changed it)... after using this router for going on 5 years would it be safe to assume (never safe to assume... lol) that this is a cabling fault or should I up the queue length?

Thanks for your assistance LennonNZ, it is much appreciated :)

1 | 2 
View this topic in a long page with up to 500 replies per page Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Orcon Global Mode launched
Created by freitasm, last reply by tgzerozone on 28-Aug-2014 07:49 (94 replies)
Pages... 5 6 7


Advice on Residential Fence replacement and neighbour
Created by networkn, last reply by nickrout on 27-Aug-2014 19:45 (26 replies)
Pages... 2


What would show if the net went down?
Created by gnfb, last reply by gnfb on 27-Aug-2014 23:33 (25 replies)
Pages... 2


Moving to Auckland - advise & recommendation
Created by nakedmolerat, last reply by nakedmolerat on 26-Aug-2014 22:48 (47 replies)
Pages... 2 3 4


Vodafone TV multicast settings on pfSense?
Created by kenkeniff, last reply by kenkeniff on 27-Aug-2014 10:32 (182 replies)
Pages... 11 12 13


XtraHost - Closing
Created by achieveit, last reply by quickymart on 27-Aug-2014 18:57 (19 replies)
Pages... 2


Slingshots Front Up! Are applauding or sceptical?
Created by gnfb, last reply by gnfb on 26-Aug-2014 21:49 (19 replies)
Pages... 2


Another Gaming computer help question
Created by Lyderies, last reply by timmmay on 26-Aug-2014 18:06 (38 replies)
Pages... 2 3



Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.