Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
List Archive: gentoo-hardened
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.2.3">
</HEAD>
<BODY>
On Tue, 2004-11-09 at 08:50 +0000, Andrzej Wąsowski wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">Hi,</FONT>
<FONT COLOR="#000000">I have decided to try hardened-dev-sources instead of usual gentoo-dev-sources</FONT>
<FONT COLOR="#000000">on my new server. This machine is not running SELinux, it was installed</FONT>
<FONT COLOR="#000000">according to a usual Gentoo Handbook. I do not think I have a firewall</FONT>
<FONT COLOR="#000000">compiled in (I believe I switched off everything related to the firewall. The</FONT>
<FONT COLOR="#000000">machine is behind an external firewall).</FONT>
<FONT COLOR="#000000">When I ping this machine I am loosing between 1% to 50% of packets, in a very</FONT>
<FONT COLOR="#000000">unstable way. From time to time the communication gets stuck and then it</FONT>
<FONT COLOR="#000000">resumes again after 30s, a minute or so. This affects not only ping, but ssh as</FONT>
<FONT COLOR="#000000">well. </FONT>
<FONT COLOR="#000000">I have nearly ruled out routing problems. The communication is slightly better</FONT>
<FONT COLOR="#000000">when trying to reach the server from the same segment, but it is still loosing</FONT>
<FONT COLOR="#000000">packets (1%). When I am on remote segment the loss is higher (30-50%). This is</FONT>
<FONT COLOR="#000000">both ways, but it is especially bad form remote machine to server. It is better</FONT>
<FONT COLOR="#000000">from the server to a remote machine. </FONT>
<FONT COLOR="#000000">At the same time ping is nearly flawless when communicating between other</FONT>
<FONT COLOR="#000000">machines on the same networks (4-5 packages lost in a 1000 long session).</FONT>
<FONT COLOR="#000000">The NIC driver on the server is e1000. Kernel version is</FONT>
<FONT COLOR="#000000">hardened-dev-sources-2.6.7-r1. </FONT>
<FONT COLOR="#000000">Does anybody have any hint, what might be going wrong? What should I check</FONT>?
</PRE>
</BLOCKQUOTE>
<BR>
Check duplex settings on both box and hub/switch - auto detect can be unreliable on some switches/hubs<BR>
<BR>
Use mii-tool or ethtool.<BR>
<BR>
Steve
</BODY>
</HTML>
|
| Attachment: |
|
signature.asc (This is a digitally signed message part)
|
|