HI again folks. Our investigations are progressing and it now looks as if the pf is not the cause of the problems at all ( :-P to the network team ;). The consultant did the right thing and did measurements immediately before and after the firewall and not some distance back into the network (the manager's desktop) as the network folk did (I mean it could not possibly be that their fancy 10G Cisco core was at fault -- could it? snicker..)
One test we would like to try is to simply turn off pf for a short period (a minute or two while we make some measurements and see if the video picture improves. Our FW is running in bridge mode so the logical thing to do is simply disable pf (pfctl -d iirc) but I want to be quite sure that this will leave the bridge open. I know logically it should and I have stated that to the change control Gods (on bended knees ;) so it better be true! One other question. Is it possible that the bridge/pf (or something else) is reordering UDP packets? If some packets were delayed then from the video apps view they may as well be dropped if they arrive outside the buffering window. Cheers, Russell (who has finally found a consultant that he approves of ;)
