Question

Locked

Customer side his Router is getting 1/3 bandwidth

By noris.roche ·
he is dropping packets at his side? what is your opinion.. is that a virus or a work station
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 4/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, 100BaseTX/FX
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1725000 bits/sec, 369 packets/sec
5 minute output rate 473000 bits/sec, 381 packets/sec
208426605 packets input, 3084212746 bytes
Received 1726935 broadcasts, 0 runts, 0 giants, 0 throttles
23 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog
0 input packets with dribble condition detected
219201572 packets output, 2558485117 bytes, 0 underruns
0 output errors, 0 collisions, 6 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Dropped packets

by robo_dev In reply to Customer side his Router ...

Could be almost anything.

Need to hook up a sniffer and take a look.

I would tend to doubt that something on the inside of the network, like a server or workstation, is causing the edge router/firewall to pass traffic slowly.

It would be more likely that a failure or misconfiguration of the core router/switch is happening.

If packet loss is happening, the port counters of the router or switch would tend to catch that (things like lots of CRC errors).

Some silly config issues:

- Port negotiation (full versus half duplex)
- Network loops (two patch cables from switch to switch)
- Routing loops, causing flapping
- Rogue DHCP servers

Collapse -

Dropped packets (ironically the message posted twice)

by robo_dev In reply to Customer side his Router ...

Could be almost anything.

Need to hook up a sniffer and take a look.

I would tend to doubt that something on the inside of the network, like a server or workstation, is causing the edge router/firewall to pass traffic slowly.

It would be more likely that a failure or misconfiguration of the core router/switch is happening.

If packet loss is happening, the port counters of the router or switch would tend to catch that (things like lots of CRC errors).

Some silly config issues:

- Port negotiation (full versus half duplex)
- Network loops (two patch cables from switch to switch)
- Routing loops, causing flapping
- Rogue DHCP servers

Back to Malware Forum
2 total posts (Page 1 of 1)  

Related Forums