Re: Bandwidth Throttling?

Kevin Hanser <[email protected]> Tue, 11 Oct 2005 13:40:52 -0400
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Ok, I ran that command, but I need some help in interpreting the 
output... I'm not really an iptables expert by any means :)

Here's what I get:

[root@nocatgw ~]# iptables -t mangle -nL -v
Chain FORWARD (policy ACCEPT 22M packets, 20G bytes)
 pkts bytes target     prot opt in     out     source               
destination

Chain INPUT (policy ACCEPT 75513 packets, 8647K bytes)
 pkts bytes target     prot opt in     out     source               
destination

Chain NoCat (1 references)
 pkts bytes target     prot opt in     out     source               
destination
5316K  414M MARK       all  --  eth1   *       0.0.0.0/0            
0.0.0.0/0         MARK set 0x4
11862 8565K MARK       all  --  *      *       192.168.123.200      
0.0.0.0/0         MAC 00:01:02:C8:11:DB MARK set 0x2

Chain OUTPUT (policy ACCEPT 15991 packets, 2024K bytes)
 pkts bytes target     prot opt in     out     source               
destination
    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:22 TOS set 0x10
    6   240 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:80 TOS set 0x08
    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:443 TOS set 0x08
    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:22 TOS set 0x10
    3   120 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:80 TOS set 0x08
    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
0.0.0.0/0         tcp dpt:443 TOS set 0x08

Chain POSTROUTING (policy ACCEPT 22M packets, 20G bytes)
 pkts bytes target     prot opt in     out     source               
destination

Chain PREROUTING (policy ACCEPT 22M packets, 20G bytes)
 pkts bytes target     prot opt in     out     source               
destination
  21M   20G NoCat      all  --  *      *       0.0.0.0/0            
0.0.0.0/0


I see my IP listed above (192.168.123.200), but I'm not sure what the 
rest of it tells me... I'm still seeing no throttling.  When I do a 
speed test, I'm getting 7+mbps so no throttling there... :)

thx!

k

Troy M Jaqua wrote:

>try:
>iptables -t mangle -nL -v
>
>That will give you the packet and byte counts as well.
>
>Kevin Hanser said:
>  
>
>>Hmmm... any idea how I would look at the "mangle table"?  Not familiar
>>with that term...
>>
>>thx
>>
>>k
>>
>>Troy M Jaqua wrote:
>>
>>    
>>
>>>Hey Kevin,
>>>
>>>I think you need to look at the mangle table to get the info which
>>>actually classifies your IP and MAC address.  The rules here are just to
>>>accept inbound packets, and those which have been previously marked to
>>>get
>>>accepted when they came in.  Anyway, I doubt you'll find the tc rules
>>>within the firewall itself, though I'm not that familiar with traffic
>>>shaping, either.
>>>
>>>-Troy
>>>
>>>Kevin Hanser said:
>>>
>>>
>>>
>>>      
>>>
>>_______________________________________________
>>NoCat mailing list
>>[email protected]
>>http://lists.nocat.net/mailman/listinfo/nocat
>>
>>    
>>
>
>  
>