Re: Strange trouble

Philipp Snizek wrote:

>	To me this doesn't seem to be an ipsec problem. 
>	I also think this no ipsec problem. Because 2 days 
>	ago all works well . And this connection works about 
>	2 months and I don't watch any problems. And now 
>	connections works correct but slow  :) I think maybe 
>	it is a routing problem. 
>
>That's what I'd have guessed. Did your ISP change routing (peering) ?
>what does your traceroute rtt say? can you make a traceroute?
>I did one to toyota.jp with a not surprising result that rtt was 300+
>ms.
>  
>
I ask my ISP of both ipsecs ends and they say that routing doesn't 
change last time. I can make traceroute, but of course i don't see gates 
between security gateways.
=======ipsec traceroute========
 traceroute to x.x.x.x (x.x.x.x), 30 hops max, 38 byte packets
 1  * * *
 2  x.x.x.x (x.x.x.x)  4755.764 ms *  2751.385 ms
=======ipsec traceroute==========
======ping with ipsec==================
30 packets transmitted, 30 received, 0% loss, time 29198ms
rtt min/avg/max/mdev = 1299.917/7651.921/30311.911/6237.503 ms, pipe 10
                                                                        
             ^^^^^^^
======ping with ipsec==================

======ping without ipsec=======
30 packets transmitted, 30 received, 0% loss, time 29290ms
rtt min/avg/max/mdev = 129.409/174.170/384.088/46.435 ms
======ping without ipsec=======

=======no ipsec traceroute=====================
traceroute to x.x.x.x (x.x.x.x), 30 hops max, 38 byte packets
<skip gatways dump>
9  x.x.x.x (x.x.x.x)  140.442 ms  142.002 ms  140.482 ms
=======no ipsec traceroute=====================

I can't understand why rtt with ipsec and without ipsec differ so much. 
I ask my ISP, and  they say - that routing with ipsec and without  ipsec 
is identical.


>		What distro do you use?
>	Linux RH 7.3 (2.4.21) on both ends + FreeS/WAN 2.05.
>
>Should be no trouble here. You had to patch the kernel then. 
>
>
>
>
>
>
>
>
>
>  
>
>
>  
>