On Fri, 16 Nov 2007, Paul M wrote:
Joe Laffey wrote:
Hi,
When I ping www.apple.com at 17.112.152.32 from my pfsense box (from the
shell) I am getting rtts of around 500ms. When I ping the same ip (not
dnsname) from a box on my DMZ I am getting 50ms rtts.
Any clue what is causing this? I tried disabling the traffic shaper, and
this had no effect. Note that this is not always they case, in fact it
only seem to happen in the evenings. I do not have any time based rules
in my firewall.
Any thoughts? This is rather strange if you ask me.
do you get any packet loss if you ping either your firewall or anything
through it?
No.
any errors on your switch?
Nope.
Weird thing is that I went and bypassed the pfsense box, and connect my
laptop directly to the network (highspeed, business class cable). If I
assign the laptop different IPs (within my netblock) I get different
results. With some IPs I can ping one site at 15ms, but if I switch the
IP then it is 450ms. Yet, some other hosts are pinging at 350ms no matter
what the local ip is.
Obvious, since it still happens wittou pfsense this is no longer a pfsense
issue. But does anyone have any clue what might cause such odd behavior? I
notice in traceroutes IN to my network that the slowdown does not occur
until it gets into my upstream's network. So the issue is with them. When
tracerouting OUT I see it with every backbone. I think this is caused by
the issue bing with INCOMING packets, which all take the same route no
matter what backbone I go OUT on.
But I still don't get the per ip differences. They do not even lie on
regular network borders (like based on /27 /28, etc.)
Any thoughts?
Thanks,
--
Joe Laffey | Visual Effects for Film and Video
LAFFEY Computer Imaging | -------------------------------------
St. Louis, MO | Show Reel http://LAFFEY.tv/?e07786
USA | -------------------------------------
. | -*- Digital Fusion Plugins -*-
--------------------------------------------------------------------------
Mail here will be rejected --> "Real Trap" <[EMAIL PROTECTED]>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]