Re: [WISPA] Mikrotik Processor Load

2009-09-06 Thread os10rules
You might see more info using some of the other similar products. My  
personal favorite is Astaro.

Greg

On Sep 2, 2009, at 8:29 AM, Mike wrote:

> Couldn't you run a bridge computer with something like Untangle
> running to see what the traffic contains at the tower site?  I've
> never run Untangle, but have considered setting up such a device to
> put at a troublesome node for analysis.  Thoughts?
>
> Mike
>
> At 07:41 AM 9/2/2009, you wrote:
>> Their isn't any way to see the processes running on a MikroTik unit.
>> If you have run away cpu load. Create a supout.rif file and send it
>> to MikroTik support and they can figure it out. The supout.rif
>> contains info I understand about running processes but they are the
>> only ones that have the tool to view the content of the .rif file.
>>
>> /Eje
>> Sent via BlackBerry from T-Mobile
>>
>> -Original Message-
>> From: Scott Reed 
>>
>> Date: Wed, 02 Sep 2009 07:10:19
>> To: WISPA General List
>> Subject: Re: [WISPA] Mikrotik Processor Load
>>
>>
>> I checked all of this before posting.  That is the reason for the
>> original question about how to see processor load.  I was hoping  
>> someone
>> would know that Mikrotik had provided something like top (for  
>> Linux) or
>> Task Manager (for Windows) that shows the processes using the
>> processor.  Would make it a lot easier to find that the problem is a
>> filter rule or something like that.
>>
>> Tom DeReggi wrote:
>>> Are you talking about a 233 mhz or 400 mhz 532?
>>>
>>> Well the first step is how much traffic is teh RF sending? 2
>> mbps in an
>>> Eth port, could be 15 mbps going out a RF port if lots of  
>>> retransmissions
>>> due to noise.
>>> We typically saw 233Mhz 532 peak out at full CPU utulization at  
>>> 18mbps or
>>> so. If two PTP links, its possible the two links are interfering  
>>> with each
>>> other.
>>> As well, if you are using WDS Slave (true bridging) accross the RF  
>>> paths,
>>> there is not coordiantion to prevent self interference, and it  
>>> uses much
>>> more CPU processing than non-WDS routed modes. Not saying it the  
>>> problem,
>>> but additional factors to investigate. As well, look for high
>> rate of small
>>> packets, for possible DOS attacks.  Its real common to see ssh  
>>> attacks.
>>>
>>>
>>> Tom DeReggi
>>> RapidDSL & Wireless, Inc
>>> IntAirNet- Fixed Wireless Broadband
>>>
>>>
>>> - Original Message -
>>> From: "Scott Reed" 
>>> To: "WISPA General List" 
>>> Sent: Tuesday, September 01, 2009 7:24 PM
>>> Subject: [WISPA] Mikrotik Processor Load
>>>
>>>
>>>
>>>> Anyone know an easy way to figure out what a 532 with 2 PtP links  
>>>> on it
>>>> would be running at 80+%?  No queues, no filters.  Moving about  
>>>> 2Mbps
>>>> from the 2 backhauls down the wire.
>>>>
>>>> --
>>>> Scott Reed
>>>> Sr. Systems Engineer
>>>> GAB Midwest
>>>> 1-800-363-1544 x4000
>>>> Cell: 260-273-7239
>>>>
>>>>
>>>>
>>>>
>> 
>>>> WISPA Wants You! Join today!
>>>> http://signup.wispa.org/
>>>>
>> 
>>>>
>>>> WISPA Wireless List: wireless@wispa.org
>>>>
>>>> Subscribe/Unsubscribe:
>>>> http://lists.wispa.org/mailman/listinfo/wireless
>>>>
>>>> Archives: http://lists.wispa.org/pipermail/wireless/
>>>>
>>>
>>>
>>>
>>>
>> 
>>> WISPA Wants You! Join today!
>>> http://signup.wispa.org/
>>>
>> 
>>>
>>> WISPA Wireless List: wireless@wispa.org
>>>
>>> Subscribe/Unsubscribe:
>>> http://lists.wispa.org/mailman/listinfo/wireless
>>>
>>> Archives: http://lists.wispa.org/pipermail/wireless/
>>>
>>> 
>>>
>>>
>>> No virus found

Re: [WISPA] Mikrotik Processor Load

2009-09-02 Thread Scott Reed
Thanks Eje.  If it looks like it is really a problem I will send them 
the file.

e...@wisp-router.com wrote:
> Their isn't any way to see the processes running on a MikroTik unit. If you 
> have run away cpu load. Create a supout.rif file and send it to MikroTik 
> support and they can figure it out. The supout.rif contains info I understand 
> about running processes but they are the only ones that have the tool to view 
> the content of the .rif file. 
>
> /Eje
> Sent via BlackBerry from T-Mobile
>
> -Original Message-
> From: Scott Reed 
>
> Date: Wed, 02 Sep 2009 07:10:19 
> To: WISPA General List
> Subject: Re: [WISPA] Mikrotik Processor Load
>
>
> I checked all of this before posting.  That is the reason for the 
> original question about how to see processor load.  I was hoping someone 
> would know that Mikrotik had provided something like top (for Linux) or 
> Task Manager (for Windows) that shows the processes using the 
> processor.  Would make it a lot easier to find that the problem is a 
> filter rule or something like that.
>
> Tom DeReggi wrote:
>   
>> Are you talking about a 233 mhz or 400 mhz 532?
>>
>> Well the first step is how much traffic is teh RF sending? 2 mbps in an 
>> Eth port, could be 15 mbps going out a RF port if lots of retransmissions 
>> due to noise.
>> We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or 
>> so. If two PTP links, its possible the two links are interfering with each 
>> other.
>> As well, if you are using WDS Slave (true bridging) accross the RF paths, 
>> there is not coordiantion to prevent self interference, and it uses much 
>> more CPU processing than non-WDS routed modes. Not saying it the problem, 
>> but additional factors to investigate. As well, look for high rate of small 
>> packets, for possible DOS attacks.  Its real common to see ssh attacks.
>>
>>
>> Tom DeReggi
>> RapidDSL & Wireless, Inc
>> IntAirNet- Fixed Wireless Broadband
>>
>>
>> - Original Message - 
>> From: "Scott Reed" 
>> To: "WISPA General List" 
>> Sent: Tuesday, September 01, 2009 7:24 PM
>> Subject: [WISPA] Mikrotik Processor Load
>>
>>
>>   
>> 
>>> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
>>> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
>>> from the 2 backhauls down the wire.
>>>
>>> -- 
>>> Scott Reed
>>> Sr. Systems Engineer
>>> GAB Midwest
>>> 1-800-363-1544 x4000
>>> Cell: 260-273-7239
>>>
>>>
>>>
>>> 
>>> WISPA Wants You! Join today!
>>> http://signup.wispa.org/
>>> 
>>>
>>> WISPA Wireless List: wireless@wispa.org
>>>
>>> Subscribe/Unsubscribe:
>>> http://lists.wispa.org/mailman/listinfo/wireless
>>>
>>> Archives: http://lists.wispa.org/pipermail/wireless/ 
>>> 
>>>   
>>
>> 
>> WISPA Wants You! Join today!
>> http://signup.wispa.org/
>> 
>>  
>> WISPA Wireless List: wireless@wispa.org
>>
>> Subscribe/Unsubscribe:
>> http://lists.wispa.org/mailman/listinfo/wireless
>>
>> Archives: http://lists.wispa.org/pipermail/wireless/
>>   
>> 
>>
>>
>> No virus found in this incoming message.
>> Checked by AVG - www.avg.com 
>> Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 
>> 06:52:00
>>
>>   
>> 
>
>   
> 
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com 
> Version: 8.5.409 / Virus Database: 270.13.75/2341 - Release Date: 09/02/09 
> 05:50:00
>
>   

-- 
Scott Reed
Sr. Systems Engineer
GAB Midwest
1-800-363-1544 x4000
Cell: 260-273-7239




WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/


Re: [WISPA] Mikrotik Processor Load

2009-09-02 Thread Mike
Couldn't you run a bridge computer with something like Untangle 
running to see what the traffic contains at the tower site?  I've 
never run Untangle, but have considered setting up such a device to 
put at a troublesome node for analysis.  Thoughts?

Mike

At 07:41 AM 9/2/2009, you wrote:
>Their isn't any way to see the processes running on a MikroTik unit. 
>If you have run away cpu load. Create a supout.rif file and send it 
>to MikroTik support and they can figure it out. The supout.rif 
>contains info I understand about running processes but they are the 
>only ones that have the tool to view the content of the .rif file.
>
>/Eje
>Sent via BlackBerry from T-Mobile
>
>-Original Message-
>From: Scott Reed 
>
>Date: Wed, 02 Sep 2009 07:10:19
>To: WISPA General List
>Subject: Re: [WISPA] Mikrotik Processor Load
>
>
>I checked all of this before posting.  That is the reason for the
>original question about how to see processor load.  I was hoping someone
>would know that Mikrotik had provided something like top (for Linux) or
>Task Manager (for Windows) that shows the processes using the
>processor.  Would make it a lot easier to find that the problem is a
>filter rule or something like that.
>
>Tom DeReggi wrote:
> > Are you talking about a 233 mhz or 400 mhz 532?
> >
> > Well the first step is how much traffic is teh RF sending? 2 
> mbps in an
> > Eth port, could be 15 mbps going out a RF port if lots of retransmissions
> > due to noise.
> > We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or
> > so. If two PTP links, its possible the two links are interfering with each
> > other.
> > As well, if you are using WDS Slave (true bridging) accross the RF paths,
> > there is not coordiantion to prevent self interference, and it uses much
> > more CPU processing than non-WDS routed modes. Not saying it the problem,
> > but additional factors to investigate. As well, look for high 
> rate of small
> > packets, for possible DOS attacks.  Its real common to see ssh attacks.
> >
> >
> > Tom DeReggi
> > RapidDSL & Wireless, Inc
> > IntAirNet- Fixed Wireless Broadband
> >
> >
> > - Original Message -
> > From: "Scott Reed" 
> > To: "WISPA General List" 
> > Sent: Tuesday, September 01, 2009 7:24 PM
> > Subject: [WISPA] Mikrotik Processor Load
> >
> >
> >
> >> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
> >> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
> >> from the 2 backhauls down the wire.
> >>
> >> --
> >> Scott Reed
> >> Sr. Systems Engineer
> >> GAB Midwest
> >> 1-800-363-1544 x4000
> >> Cell: 260-273-7239
> >>
> >>
> >>
> >> 
> 
> >> WISPA Wants You! Join today!
> >> http://signup.wispa.org/
> >> 
> 
> >>
> >> WISPA Wireless List: wireless@wispa.org
> >>
> >> Subscribe/Unsubscribe:
> >> http://lists.wispa.org/mailman/listinfo/wireless
> >>
> >> Archives: http://lists.wispa.org/pipermail/wireless/
> >>
> >
> >
> >
> > 
> 
> > WISPA Wants You! Join today!
> > http://signup.wispa.org/
> > 
> 
> >
> > WISPA Wireless List: wireless@wispa.org
> >
> > Subscribe/Unsubscribe:
> > http://lists.wispa.org/mailman/listinfo/wireless
> >
> > Archives: http://lists.wispa.org/pipermail/wireless/
> >
> > 
> >
> >
> > No virus found in this incoming message.
> > Checked by AVG - www.avg.com
> > Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 
> 09/01/09 06:52:00
> >
> >
>
>--
>Scott Reed
>Sr. Systems Engineer
>GAB Midwest
>1-800-363-1544 x4000
>Cell: 260-273-7239
>
>
>
>
>WISPA Wants You! Join today!
>http://signup.wispa.org/
>
>
>WISPA Wireless List: wireless@wispa.org
>
>Subscribe/Unsubscribe:
>http://lists.wispa.org/mailman/listinfo/wireless
>
>Archive

Re: [WISPA] Mikrotik Processor Load

2009-09-02 Thread eje
Their isn't any way to see the processes running on a MikroTik unit. If you 
have run away cpu load. Create a supout.rif file and send it to MikroTik 
support and they can figure it out. The supout.rif contains info I understand 
about running processes but they are the only ones that have the tool to view 
the content of the .rif file. 

/Eje
Sent via BlackBerry from T-Mobile

-Original Message-
From: Scott Reed 

Date: Wed, 02 Sep 2009 07:10:19 
To: WISPA General List
Subject: Re: [WISPA] Mikrotik Processor Load


I checked all of this before posting.  That is the reason for the 
original question about how to see processor load.  I was hoping someone 
would know that Mikrotik had provided something like top (for Linux) or 
Task Manager (for Windows) that shows the processes using the 
processor.  Would make it a lot easier to find that the problem is a 
filter rule or something like that.

Tom DeReggi wrote:
> Are you talking about a 233 mhz or 400 mhz 532?
>
> Well the first step is how much traffic is teh RF sending? 2 mbps in an 
> Eth port, could be 15 mbps going out a RF port if lots of retransmissions 
> due to noise.
> We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or 
> so. If two PTP links, its possible the two links are interfering with each 
> other.
> As well, if you are using WDS Slave (true bridging) accross the RF paths, 
> there is not coordiantion to prevent self interference, and it uses much 
> more CPU processing than non-WDS routed modes. Not saying it the problem, 
> but additional factors to investigate. As well, look for high rate of small 
> packets, for possible DOS attacks.  Its real common to see ssh attacks.
>
>
> Tom DeReggi
> RapidDSL & Wireless, Inc
> IntAirNet- Fixed Wireless Broadband
>
>
> - Original Message - 
> From: "Scott Reed" 
> To: "WISPA General List" 
> Sent: Tuesday, September 01, 2009 7:24 PM
> Subject: [WISPA] Mikrotik Processor Load
>
>
>   
>> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
>> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
>> from the 2 backhauls down the wire.
>>
>> -- 
>> Scott Reed
>> Sr. Systems Engineer
>> GAB Midwest
>> 1-800-363-1544 x4000
>> Cell: 260-273-7239
>>
>>
>>
>> 
>> WISPA Wants You! Join today!
>> http://signup.wispa.org/
>> 
>>
>> WISPA Wireless List: wireless@wispa.org
>>
>> Subscribe/Unsubscribe:
>> http://lists.wispa.org/mailman/listinfo/wireless
>>
>> Archives: http://lists.wispa.org/pipermail/wireless/ 
>> 
>
>
>
> 
> WISPA Wants You! Join today!
> http://signup.wispa.org/
> 
>  
> WISPA Wireless List: wireless@wispa.org
>
> Subscribe/Unsubscribe:
> http://lists.wispa.org/mailman/listinfo/wireless
>
> Archives: http://lists.wispa.org/pipermail/wireless/
>   
> 
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com 
> Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 
> 06:52:00
>
>   

-- 
Scott Reed
Sr. Systems Engineer
GAB Midwest
1-800-363-1544 x4000
Cell: 260-273-7239




WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/



WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/


Re: [WISPA] Mikrotik Processor Load

2009-09-02 Thread Scott Reed
I checked all of this before posting.  That is the reason for the 
original question about how to see processor load.  I was hoping someone 
would know that Mikrotik had provided something like top (for Linux) or 
Task Manager (for Windows) that shows the processes using the 
processor.  Would make it a lot easier to find that the problem is a 
filter rule or something like that.

Tom DeReggi wrote:
> Are you talking about a 233 mhz or 400 mhz 532?
>
> Well the first step is how much traffic is teh RF sending? 2 mbps in an 
> Eth port, could be 15 mbps going out a RF port if lots of retransmissions 
> due to noise.
> We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or 
> so. If two PTP links, its possible the two links are interfering with each 
> other.
> As well, if you are using WDS Slave (true bridging) accross the RF paths, 
> there is not coordiantion to prevent self interference, and it uses much 
> more CPU processing than non-WDS routed modes. Not saying it the problem, 
> but additional factors to investigate. As well, look for high rate of small 
> packets, for possible DOS attacks.  Its real common to see ssh attacks.
>
>
> Tom DeReggi
> RapidDSL & Wireless, Inc
> IntAirNet- Fixed Wireless Broadband
>
>
> - Original Message - 
> From: "Scott Reed" 
> To: "WISPA General List" 
> Sent: Tuesday, September 01, 2009 7:24 PM
> Subject: [WISPA] Mikrotik Processor Load
>
>
>   
>> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
>> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
>> from the 2 backhauls down the wire.
>>
>> -- 
>> Scott Reed
>> Sr. Systems Engineer
>> GAB Midwest
>> 1-800-363-1544 x4000
>> Cell: 260-273-7239
>>
>>
>>
>> 
>> WISPA Wants You! Join today!
>> http://signup.wispa.org/
>> 
>>
>> WISPA Wireless List: wireless@wispa.org
>>
>> Subscribe/Unsubscribe:
>> http://lists.wispa.org/mailman/listinfo/wireless
>>
>> Archives: http://lists.wispa.org/pipermail/wireless/ 
>> 
>
>
>
> 
> WISPA Wants You! Join today!
> http://signup.wispa.org/
> 
>  
> WISPA Wireless List: wireless@wispa.org
>
> Subscribe/Unsubscribe:
> http://lists.wispa.org/mailman/listinfo/wireless
>
> Archives: http://lists.wispa.org/pipermail/wireless/
>   
> 
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com 
> Version: 8.5.409 / Virus Database: 270.13.74/2339 - Release Date: 09/01/09 
> 06:52:00
>
>   

-- 
Scott Reed
Sr. Systems Engineer
GAB Midwest
1-800-363-1544 x4000
Cell: 260-273-7239




WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/


Re: [WISPA] Mikrotik Processor Load

2009-09-01 Thread Tom DeReggi
Are you talking about a 233 mhz or 400 mhz 532?

Well the first step is how much traffic is teh RF sending? 2 mbps in an 
Eth port, could be 15 mbps going out a RF port if lots of retransmissions 
due to noise.
We typically saw 233Mhz 532 peak out at full CPU utulization at 18mbps or 
so. If two PTP links, its possible the two links are interfering with each 
other.
As well, if you are using WDS Slave (true bridging) accross the RF paths, 
there is not coordiantion to prevent self interference, and it uses much 
more CPU processing than non-WDS routed modes. Not saying it the problem, 
but additional factors to investigate. As well, look for high rate of small 
packets, for possible DOS attacks.  Its real common to see ssh attacks.


Tom DeReggi
RapidDSL & Wireless, Inc
IntAirNet- Fixed Wireless Broadband


- Original Message - 
From: "Scott Reed" 
To: "WISPA General List" 
Sent: Tuesday, September 01, 2009 7:24 PM
Subject: [WISPA] Mikrotik Processor Load


> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
> from the 2 backhauls down the wire.
>
> -- 
> Scott Reed
> Sr. Systems Engineer
> GAB Midwest
> 1-800-363-1544 x4000
> Cell: 260-273-7239
>
>
>
> 
> WISPA Wants You! Join today!
> http://signup.wispa.org/
> 
>
> WISPA Wireless List: wireless@wispa.org
>
> Subscribe/Unsubscribe:
> http://lists.wispa.org/mailman/listinfo/wireless
>
> Archives: http://lists.wispa.org/pipermail/wireless/ 




WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/


Re: [WISPA] Mikrotik Processor Load

2009-09-01 Thread Kevin Neal
Connection tracking?  Do you have all of the extra packages you don't
use disabled?  I've seen this once with web proxy enabled and someone
using it to send spam.

-Kevin


On Tue, Sep 1, 2009 at 5:24 PM, Scott Reed wrote:
> Anyone know an easy way to figure out what a 532 with 2 PtP links on it
> would be running at 80+%?  No queues, no filters.  Moving about 2Mbps
> from the 2 backhauls down the wire.
>
> --
> Scott Reed
> Sr. Systems Engineer
> GAB Midwest
> 1-800-363-1544 x4000
> Cell: 260-273-7239
>
>
>
> 
> WISPA Wants You! Join today!
> http://signup.wispa.org/
> 
>
> WISPA Wireless List: wireless@wispa.org
>
> Subscribe/Unsubscribe:
> http://lists.wispa.org/mailman/listinfo/wireless
>
> Archives: http://lists.wispa.org/pipermail/wireless/
>



WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/


[WISPA] Mikrotik Processor Load

2009-09-01 Thread Scott Reed
Anyone know an easy way to figure out what a 532 with 2 PtP links on it 
would be running at 80+%?  No queues, no filters.  Moving about 2Mbps 
from the 2 backhauls down the wire.

-- 
Scott Reed
Sr. Systems Engineer
GAB Midwest
1-800-363-1544 x4000
Cell: 260-273-7239




WISPA Wants You! Join today!
http://signup.wispa.org/

 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/