On Fri, 16 Nov 2007, Paul M wrote:

Joe Laffey wrote:
Hi,


When I ping www.apple.com at 17.112.152.32 from my pfsense box (from the
shell) I am getting rtts of around 500ms. When I ping the same ip (not
dnsname) from a box on my DMZ I am getting 50ms rtts.

Any clue what is causing this? I tried disabling the traffic shaper, and
this had no effect. Note that this is not always they case, in fact it
only seem to happen in the evenings. I do not have any time based rules
in my firewall.

Any thoughts? This is rather strange if you ask me.

do you get any packet loss if you ping either your firewall or anything
through it?


No.


any errors on your switch?

Nope.

Weird thing is that I went and bypassed the pfsense box, and connect my laptop directly to the network (highspeed, business class cable). If I assign the laptop different IPs (within my netblock) I get different results. With some IPs I can ping one site at 15ms, but if I switch the IP then it is 450ms. Yet, some other hosts are pinging at 350ms no matter what the local ip is.

Obvious, since it still happens wittou pfsense this is no longer a pfsense issue. But does anyone have any clue what might cause such odd behavior? I notice in traceroutes IN to my network that the slowdown does not occur until it gets into my upstream's network. So the issue is with them. When tracerouting OUT I see it with every backbone. I think this is caused by the issue bing with INCOMING packets, which all take the same route no matter what backbone I go OUT on.

But I still don't get the per ip differences. They do not even lie on regular network borders (like based on /27 /28, etc.)

Any thoughts?

Thanks,



--
Joe Laffey                |       Visual Effects for Film and Video
LAFFEY Computer Imaging   |     -------------------------------------
St. Louis, MO             |       Show Reel http://LAFFEY.tv/?e07786
USA                       |     -------------------------------------
.                         |        -*- Digital Fusion Plugins -*-
--------------------------------------------------------------------------
Mail here will be rejected --> "Real Trap" <[EMAIL PROTECTED]>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to