Firewalls tend to be limited by PPS not bandwidth. The overhead is all in processing the header.
The solaris box might be sending short packets if the code does the equivalent of a fflush() (to use filesystem terms) which generate the mumble mumble PUSH mumble mumble. Do you control the code on the Solaris side? Can you see if it is You basically want to do the opposite of this advice: http://stackoverflow.com/questions/914286/what-does-it-mean-to-flush-a-socket Make sure TCP_NODELAY is not being set (that assures that there is a1-to-1 ratio of send()s to packets; i.e. turns off any coalescing). See if SO_SNDBUF is being set explicitly (I can't remember the semantics but you want as much buffering as possible). Lastly, try to verify that the MTU on each router/device/whatever from the sender to the receiver is set to max (usually 1500). Tom _______________________________________________ Tech mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
