Re: [WISPA] Mikrotik Processor Load
You might see more info using some of the other similar products. My personal favorite is Astaro. Greg On Sep 2, 2009, at 8:29 AM, Mike wrote: Couldn't you run a bridge computer with something like Untangle running to see what the traffic contains at the tower site? I've never run Untangle, but have considered setting up such a device to put at a troublesome node for analysis. Thoughts? Mike At 07:41 AM 9/2/2009, you wrote: Their isn't any way to see the processes running on a MikroTik unit. If you have run away cpu load. Create a supout.rif file and send it to MikroTik support and they can figure it out. The supout.rif contains info I understand about running processes but they are the only ones that have the tool to view the content of the .rif file. /Eje Sent via BlackBerry from T-Mobile -Original Message- From: Scott Reed scottr...@onlyinternet.net Date: Wed, 02 Sep 2009 07:10:19 To: WISPA General Listwireless@wispa.org Subject: Re: [WISPA] Mikrotik Processor Load I checked all of this before posting. That is the reason for the original question about how to see processor load. I was hoping someone would know that Mikrotik had provided something like top (for Linux) or Task Manager (for Windows) that shows the processes using the processor. Would make it a lot easier to find that the problem is a filter rule or something like that. Tom DeReggi wrote: Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 06:52:00 -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http
Re: [WISPA] Mikrotik Processor Load
I checked all of this before posting. That is the reason for the original question about how to see processor load. I was hoping someone would know that Mikrotik had provided something like top (for Linux) or Task Manager (for Windows) that shows the processes using the processor. Would make it a lot easier to find that the problem is a filter rule or something like that. Tom DeReggi wrote: Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 06:52:00 -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Mikrotik Processor Load
Their isn't any way to see the processes running on a MikroTik unit. If you have run away cpu load. Create a supout.rif file and send it to MikroTik support and they can figure it out. The supout.rif contains info I understand about running processes but they are the only ones that have the tool to view the content of the .rif file. /Eje Sent via BlackBerry from T-Mobile -Original Message- From: Scott Reed scottr...@onlyinternet.net Date: Wed, 02 Sep 2009 07:10:19 To: WISPA General Listwireless@wispa.org Subject: Re: [WISPA] Mikrotik Processor Load I checked all of this before posting. That is the reason for the original question about how to see processor load. I was hoping someone would know that Mikrotik had provided something like top (for Linux) or Task Manager (for Windows) that shows the processes using the processor. Would make it a lot easier to find that the problem is a filter rule or something like that. Tom DeReggi wrote: Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 06:52:00 -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Mikrotik Processor Load
Couldn't you run a bridge computer with something like Untangle running to see what the traffic contains at the tower site? I've never run Untangle, but have considered setting up such a device to put at a troublesome node for analysis. Thoughts? Mike At 07:41 AM 9/2/2009, you wrote: Their isn't any way to see the processes running on a MikroTik unit. If you have run away cpu load. Create a supout.rif file and send it to MikroTik support and they can figure it out. The supout.rif contains info I understand about running processes but they are the only ones that have the tool to view the content of the .rif file. /Eje Sent via BlackBerry from T-Mobile -Original Message- From: Scott Reed scottr...@onlyinternet.net Date: Wed, 02 Sep 2009 07:10:19 To: WISPA General Listwireless@wispa.org Subject: Re: [WISPA] Mikrotik Processor Load I checked all of this before posting. That is the reason for the original question about how to see processor load. I was hoping someone would know that Mikrotik had provided something like top (for Linux) or Task Manager (for Windows) that shows the processes using the processor. Would make it a lot easier to find that the problem is a filter rule or something like that. Tom DeReggi wrote: Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 06:52:00 -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Mikrotik Processor Load
Thanks Eje. If it looks like it is really a problem I will send them the file. e...@wisp-router.com wrote: Their isn't any way to see the processes running on a MikroTik unit. If you have run away cpu load. Create a supout.rif file and send it to MikroTik support and they can figure it out. The supout.rif contains info I understand about running processes but they are the only ones that have the tool to view the content of the .rif file. /Eje Sent via BlackBerry from T-Mobile -Original Message- From: Scott Reed scottr...@onlyinternet.net Date: Wed, 02 Sep 2009 07:10:19 To: WISPA General Listwireless@wispa.org Subject: Re: [WISPA] Mikrotik Processor Load I checked all of this before posting. That is the reason for the original question about how to see processor load. I was hoping someone would know that Mikrotik had provided something like top (for Linux) or Task Manager (for Windows) that shows the processes using the processor. Would make it a lot easier to find that the problem is a filter rule or something like that. Tom DeReggi wrote: Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 06:52:00 No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.409 / Virus Database: 270.13.75/2341 - Release Date: 09/02/09 05:50:00 -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Mikrotik Processor Load
Connection tracking? Do you have all of the extra packages you don't use disabled? I've seen this once with web proxy enabled and someone using it to send spam. -Kevin On Tue, Sep 1, 2009 at 5:24 PM, Scott Reedscottr...@onlyinternet.net wrote: Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
Re: [WISPA] Mikrotik Processor Load
Are you talking about a 233 mhz or 400 mhz 532? Well the first step is how much traffic is teh RF sending? 2 mbps in an Eth port, could be 15 mbps going out a RF port if lots of retransmissions due to noise. We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or so. If two PTP links, its possible the two links are interfering with each other. As well, if you are using WDS Slave (true bridging) accross the RF paths, there is not coordiantion to prevent self interference, and it uses much more CPU processing than non-WDS routed modes. Not saying it the problem, but additional factors to investigate. As well, look for high rate of small packets, for possible DOS attacks. Its real common to see ssh attacks. Tom DeReggi RapidDSL Wireless, Inc IntAirNet- Fixed Wireless Broadband - Original Message - From: Scott Reed scottr...@onlyinternet.net To: WISPA General List wireless@wispa.org Sent: Tuesday, September 01, 2009 7:24 PM Subject: [WISPA] Mikrotik Processor Load Anyone know an easy way to figure out what a 532 with 2 PtP links on it would be running at 80+%? No queues, no filters. Moving about 2Mbps from the 2 backhauls down the wire. -- Scott Reed Sr. Systems Engineer GAB Midwest 1-800-363-1544 x4000 Cell: 260-273-7239 WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/ WISPA Wants You! Join today! http://signup.wispa.org/ WISPA Wireless List: wireless@wispa.org Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
