Re: Bandwidth Throttling?

Anyone w/more iptables/tc experience than me that can make anything of 
the output below?

thx

k

Kevin Hanser wrote:

> Ok, I ran that command, but I need some help in interpreting the 
> output... I'm not really an iptables expert by any means :)
>
> Here's what I get:
>
> [root@nocatgw ~]# iptables -t mangle -nL -v
> Chain FORWARD (policy ACCEPT 22M packets, 20G bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>
> Chain INPUT (policy ACCEPT 75513 packets, 8647K bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>
> Chain NoCat (1 references)
> pkts bytes target     prot opt in     out     source               
> destination
> 5316K  414M MARK       all  --  eth1   *       0.0.0.0/0            
> 0.0.0.0/0         MARK set 0x4
> 11862 8565K MARK       all  --  *      *       192.168.123.200      
> 0.0.0.0/0         MAC 00:01:02:C8:11:DB MARK set 0x2
>
> Chain OUTPUT (policy ACCEPT 15991 packets, 2024K bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:22 TOS set 0x10
>    6   240 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:80 TOS set 0x08
>    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:443 TOS set 0x08
>    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:22 TOS set 0x10
>    3   120 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:80 TOS set 0x08
>    0     0 TOS        tcp  --  *      *       0.0.0.0/0            
> 0.0.0.0/0         tcp dpt:443 TOS set 0x08
>
> Chain POSTROUTING (policy ACCEPT 22M packets, 20G bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>
> Chain PREROUTING (policy ACCEPT 22M packets, 20G bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>  21M   20G NoCat      all  --  *      *       0.0.0.0/0            
> 0.0.0.0/0
>
>
> I see my IP listed above (192.168.123.200), but I'm not sure what the 
> rest of it tells me... I'm still seeing no throttling.  When I do a 
> speed test, I'm getting 7+mbps so no throttling there... :)
>
> thx!
>
> k
>
> Troy M Jaqua wrote:
>
>> try:
>> iptables -t mangle -nL -v
>>
>> That will give you the packet and byte counts as well.
>>
>> Kevin Hanser said:
>>  
>>
>>> Hmmm... any idea how I would look at the "mangle table"?  Not familiar
>>> with that term...
>>>
>>> thx
>>>
>>> k
>>>
>>> Troy M Jaqua wrote:
>>>
>>>   
>>>
>>>> Hey Kevin,
>>>>
>>>> I think you need to look at the mangle table to get the info which
>>>> actually classifies your IP and MAC address.  The rules here are 
>>>> just to
>>>> accept inbound packets, and those which have been previously marked to
>>>> get
>>>> accepted when they came in.  Anyway, I doubt you'll find the tc rules
>>>> within the firewall itself, though I'm not that familiar with traffic
>>>> shaping, either.
>>>>
>>>> -Troy
>>>>
>>>> Kevin Hanser said:
>>>>
>>>>
>>>>
>>>>     
>>>
>>> _______________________________________________
>>> NoCat mailing list
>>> [email protected]
>>> http://lists.nocat.net/mailman/listinfo/nocat
>>>
>>>   
>>
>>
>>  
>>
>
> _______________________________________________
> NoCat mailing list
> [email protected]
> http://lists.nocat.net/mailman/listinfo/nocat