Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-hardened
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: Andrzej Wąsowski <wazow@...>
From: Steve Murphy <steve@...>
Subject: Re: Hardened kernel (?) dropping packets
Date: Tue, 09 Nov 2004 20:48:12 +0000
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.2.3">
</HEAD>
<BODY>
On Tue, 2004-11-09 at 08:50 +0000, Andrzej W&#261;sowski wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">Hi,</FONT>

<FONT COLOR="#000000">I have decided to try hardened-dev-sources instead of usual gentoo-dev-sources</FONT>
<FONT COLOR="#000000">on my new server.  This machine is not running SELinux, it was installed</FONT>
<FONT COLOR="#000000">according to a usual Gentoo Handbook.   I do not think I have a firewall</FONT>
<FONT COLOR="#000000">compiled in (I believe I switched off everything related to the firewall.  The</FONT>
<FONT COLOR="#000000">machine is behind an external firewall).</FONT>


<FONT COLOR="#000000">When I ping this machine I am loosing between 1% to 50% of packets, in a very</FONT>
<FONT COLOR="#000000">unstable way.  From time to time the communication gets stuck and then it</FONT>
<FONT COLOR="#000000">resumes again after 30s, a minute or so. This affects not only ping, but ssh as</FONT>
<FONT COLOR="#000000">well.  </FONT>

<FONT COLOR="#000000">I have nearly ruled out routing problems.  The communication is slightly better</FONT>
<FONT COLOR="#000000">when trying to reach the server from the same segment, but it is still loosing</FONT>
<FONT COLOR="#000000">packets (1%).  When I am on remote segment the loss is higher (30-50%).  This is</FONT>
<FONT COLOR="#000000">both ways, but it is especially bad form remote machine to server.  It is better</FONT>
<FONT COLOR="#000000">from the server to a remote machine. </FONT>

<FONT COLOR="#000000">At the same time ping is nearly flawless when communicating between other</FONT>
<FONT COLOR="#000000">machines on the same networks (4-5 packages lost in a 1000 long session).</FONT>

<FONT COLOR="#000000">The NIC driver on the server is e1000.  Kernel version is</FONT>
<FONT COLOR="#000000">hardened-dev-sources-2.6.7-r1.  </FONT>

<FONT COLOR="#000000">Does anybody have any hint, what might be going wrong?&nbsp; What should I check</FONT>?
</PRE>
</BLOCKQUOTE>
<BR>
Check duplex settings on both box and hub/switch - auto detect can be unreliable on some switches/hubs<BR>
<BR>
Use mii-tool or ethtool.<BR>
<BR>
Steve
</BODY>
</HTML>
Attachment:
signature.asc (This is a digitally signed message part)
Replies:
Re: Hardened kernel (?) dropping packets
-- Andrzej Wąsowski
References:
Hardened kernel (?) dropping packets
-- Andrzej Wąsowski
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
RE: Hardened kernel (?) dropping packets
Next by thread:
Re: Hardened kernel (?) dropping packets
Previous by date:
selinux-sources
Next by date:
courier-imap avc denied name_bind


Updated Jun 17, 2009

Summary: Archive of the gentoo-hardened mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.