RE: Flaky ADSL Connection/Disconnection Control
"Laci Nagy" <dartcom-bzGI/[email protected]> Wed, 20 Oct 2004 16:06:28 +1000
| Newsgroups | gmane.comp.security.firewalls.smoothwall.general |
|---|---|
| Message-ID | <000701c4b66a$f10cc0f0$c801a8c0@enterprise> |
Hi Ken, >You didn't say if the spikes in the graphic were for uploads or downloads. Here are those details ADSL is a 1500/256 link. Red NIC Traffic is: Max Incoming: 60.3k Max Outgoing: 4.9k Are these "excessive", I wouldn't have thought so. I have had another look at the graphs and there definitely seems to be two disconnections a day, early morning requiring a reboot SOB each day and one in the early afternoon requiring a reboot around 2.30pm. On the weekends when there isn't anyone there to reboot, there is no traffic until the SOB reboot Monday morning. Thanks for this info, we'll look into it. >In order to control the this you could do one of two things > >1.) Control on the graphic graphs the bandwidth over the last month for uploads i.e. the -K side of the Red Interface Log. >2.) You could control the amount of data that has been uploaded/downloaded on your line over the last month. Run the following command from the root console of your smoothwall. >ipacsum -t "last month" >what your looking for is for high values i.e. several GB's in the >Incoming RED (PPP) Forward >Outgoing RED (PPP) Forward. >If this is the case then in order to find the culprit you could control all open connections. There is a usefull perl script for this which can be found at http://freshmeat.net/projects/conntrackviewer/ In order to control the NATed connection then use "conntrack-viewer.pl -m" (naturally without the ""). You should then see a list of all open connections including the IP's and Ports. You just then need to go through the list for computers on your network which have a lot of open connections to different External IP'S. There is then a high chance that these PC's are running file sharing software. Ken _______________________________________________ gpl mailing list [email protected] http://lists.smoothwall.org/mailman/listinfo/gpl SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall