RE: Flaky ADSL Connection/Disconnection Control

"Laci Nagy" <dartcom-bzGI/[email protected]> Wed, 20 Oct 2004 16:06:28 +1000
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Message-ID <000701c4b66a$f10cc0f0$c801a8c0@enterprise>
Hi Ken,

>You didn't say if the spikes in the graphic were for uploads or
downloads.

Here are those details
ADSL is a 1500/256 link. Red NIC Traffic is: Max Incoming: 60.3k Max
Outgoing: 4.9k

Are these "excessive", I wouldn't have thought so.

I have had another look at the graphs and there definitely seems to be two
disconnections a day, early morning requiring a reboot SOB each day and one
in the early afternoon requiring a reboot around 2.30pm. On the weekends
when there isn't anyone there to reboot, there is no traffic until the SOB
reboot Monday morning.


Thanks for this info, we'll look into it.

>In order to control the this you could do one of two things
>
>1.) Control on the graphic graphs the bandwidth over the last month for
uploads i.e. the -K side of the Red Interface Log.

>2.) You could control the amount of data that has been uploaded/downloaded
on your line over the last month.  Run the following command from the root
console of your smoothwall.
>ipacsum -t "last month"
>what your looking for is for high values i.e. several GB's in the
>Incoming RED (PPP) Forward
>Outgoing RED (PPP) Forward.

>If this is the case then in order to find the culprit you could control all
open connections.  There is a usefull perl script for this which can be
found at http://freshmeat.net/projects/conntrackviewer/ In order to control
the NATed connection then use "conntrack-viewer.pl -m" (naturally without
the "").  You should then see a list of all open connections including the
IP's and Ports.  You just then need to go through the list for computers on
your network which have a lot of open connections to different External
IP'S.  There is then a high chance that these PC's are running file sharing
software.

Ken
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall