Hi, I am using Shorewall shell on my Linux router. Basically the router has 2 interfaces; ppp0 for wan , br0 for lan. Under br0 bridge interface I have ath0 (wifi atheros) and eth2 interfaces. I have no performance problem on the lan clients which are connected to eth2, but for the clients connected to ath0 wifi interface there is a big performance issue. When there is no traffic on wifi interface, the client can ping the router with 2ms response. But when the client starts any web browsing or any oher traffic, the ping responses from the router go above 1000ms or even 2000ms. Of course data communication from the wifi clients are terribly slow. The client seems to be connected with 54Mbps but it can''t go even up to 100kbps. It first seemed to be a trafffic shaping problem to me , so I moved all tcrules, tcclasses and tcdevices files and restarted without any traffic shaping. But that didn''t solve the issue. How can I troubleshoot this ? Below is some information from my linux router. I will send the shorewall dump output in a seperate email. [trixbox1.localdomain ~]# /sbin/shorewall version 4.0.12 [trixbox1.localdomain ~]# ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:0d:b9:12:cf:90 brd ff:ff:ff:ff:ff:ff inet 192.168.1.2/24 brd 192.168.1.255 scope global eth1 inet6 fe80::20d:b9ff:fe12:cf90/64 scope link valid_lft forever preferred_lft forever 3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:0d:b9:12:cf:91 brd ff:ff:ff:ff:ff:ff inet6 fe80::20d:b9ff:fe12:cf91/64 scope link valid_lft forever preferred_lft forever 4: wifi0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 280 link/ieee802.11 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff 5: ath0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 2290 qdisc noqueue link/ether 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff inet6 fe80::280:48ff:fe4f:218d/64 scope link valid_lft forever preferred_lft forever 6: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue link/ether 00:0d:b9:12:cf:91 brd ff:ff:ff:ff:ff:ff inet 192.168.254.254/24 brd 192.168.254.255 scope global br0 inet6 fe80::20d:b9ff:fe12:cf91/64 scope link valid_lft forever preferred_lft forever 13: sit0: <NOARP> mtu 1480 qdisc noop link/sit 0.0.0.0 brd 0.0.0.0 14: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc pfifo_fast qlen 3 link/ppp inet 195.87.169.166 peer 192.168.20.2/32 scope global ppp0 [trixbox1.localdomain ~]# [trixbox1.localdomain ~]# ip route show 192.168.20.2 dev ppp0 proto kernel scope link src 195.87.169.166 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.2 192.168.254.0/24 dev br0 proto kernel scope link src 192.168.254.254 169.254.0.0/16 dev eth1 scope link default dev ppp0 scope link [trixbox1.localdomain ~]# Regards, Mekabe ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Shorewall dump is attached to this email. Thanks for any comments/suggestions. On Sat, Jul 11, 2009 at 10:44 PM, Mekabe Ramein<mrmrmrmr@gmail.com> wrote:> Hi, > > I am using Shorewall shell on my Linux router. Basically the router > has 2 interfaces; ppp0 for wan , br0 for lan. > Under br0 bridge interface I have ath0 (wifi atheros) and eth2 interfaces. > > I have no performance problem on the lan clients which are connected > to eth2, but for the clients connected to ath0 wifi interface there is > a big performance issue. > > When there is no traffic on wifi interface, the client can ping the > router with 2ms response. But when the client starts any web browsing > or any oher traffic, the ping responses from the router go above > 1000ms or even 2000ms. > Of course data communication from the wifi clients are terribly slow. > The client seems to be connected with 54Mbps but it can''t go even up to 100kbps. > > It first seemed to be a trafffic shaping problem to me , so I moved > all tcrules, tcclasses and tcdevices files and restarted without any > traffic shaping. But that didn''t solve the issue. > > How can I troubleshoot this ? > > Below is some information from my linux router. I will send the > shorewall dump output in a seperate email. > > > [trixbox1.localdomain ~]# /sbin/shorewall version > 4.0.12 > > [trixbox1.localdomain ~]# ip addr show > 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue > link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 > inet 127.0.0.1/8 scope host lo > inet6 ::1/128 scope host > valid_lft forever preferred_lft forever > 2: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 > link/ether 00:0d:b9:12:cf:90 brd ff:ff:ff:ff:ff:ff > inet 192.168.1.2/24 brd 192.168.1.255 scope global eth1 > inet6 fe80::20d:b9ff:fe12:cf90/64 scope link > valid_lft forever preferred_lft forever > 3: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000 > link/ether 00:0d:b9:12:cf:91 brd ff:ff:ff:ff:ff:ff > inet6 fe80::20d:b9ff:fe12:cf91/64 scope link > valid_lft forever preferred_lft forever > 4: wifi0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 280 > link/ieee802.11 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff > 5: ath0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 2290 qdisc noqueue > link/ether 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff > inet6 fe80::280:48ff:fe4f:218d/64 scope link > valid_lft forever preferred_lft forever > 6: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue > link/ether 00:0d:b9:12:cf:91 brd ff:ff:ff:ff:ff:ff > inet 192.168.254.254/24 brd 192.168.254.255 scope global br0 > inet6 fe80::20d:b9ff:fe12:cf91/64 scope link > valid_lft forever preferred_lft forever > 13: sit0: <NOARP> mtu 1480 qdisc noop > link/sit 0.0.0.0 brd 0.0.0.0 > 14: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc > pfifo_fast qlen 3 > link/ppp > inet 195.87.169.166 peer 192.168.20.2/32 scope global ppp0 > [trixbox1.localdomain ~]# > [trixbox1.localdomain ~]# ip route show > 192.168.20.2 dev ppp0 proto kernel scope link src 195.87.169.166 > 192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.2 > 192.168.254.0/24 dev br0 proto kernel scope link src 192.168.254.254 > 169.254.0.0/16 dev eth1 scope link > default dev ppp0 scope link > [trixbox1.localdomain ~]# > > Regards, > Mekabe >------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Mekabe Ramein wrote:> Shorewall dump is attached to this email. > > Thanks for any comments/suggestions. > > On Sat, Jul 11, 2009 at 10:44 PM, Mekabe Ramein<mrmrmrmr@gmail.com> wrote: >> Hi, >> >> I am using Shorewall shell on my Linux router. Basically the router >> has 2 interfaces; ppp0 for wan , br0 for lan. >> Under br0 bridge interface I have ath0 (wifi atheros) and eth2 interfaces. >> >> I have no performance problem on the lan clients which are connected >> to eth2, but for the clients connected to ath0 wifi interface there is >> a big performance issue. >> >> When there is no traffic on wifi interface, the client can ping the >> router with 2ms response. But when the client starts any web browsing >> or any oher traffic, the ping responses from the router go above >> 1000ms or even 2000ms. >> Of course data communication from the wifi clients are terribly slow. >> The client seems to be connected with 54Mbps but it can''t go even up to 100kbps. >> >> It first seemed to be a trafffic shaping problem to me , so I moved >> all tcrules, tcclasses and tcdevices files and restarted without any >> traffic shaping. But that didn''t solve the issue. >> >> How can I troubleshoot this ? >> >> Below is some information from my linux router. I will send the >> shorewall dump output in a seperate email.4: wifi0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 280 link/ieee802.11 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff RX: bytes packets errors dropped overrun mcast 1143084 8705 0 0 0 0 TX: bytes packets errors dropped carrier collsns 7520750 13496 8274 0 0 0 That is a horrible error rate. Looks to me like a hardware or driver issue. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Ok; then there is a driver issue , unless any hardware failure ? I''ll submit a ticket to the Madwifi project group. Do you have any information about Madwifi and mini-pci Atheros cards ? What may have cause such failure ? (like unplugged antenna ?) Thanks, Mekabe On Sat, Jul 11, 2009 at 11:01 PM, Tom Eastep<teastep@shorewall.net> wrote:> Mekabe Ramein wrote: >> Shorewall dump is attached to this email. >> >> Thanks for any comments/suggestions. >> >> On Sat, Jul 11, 2009 at 10:44 PM, Mekabe Ramein<mrmrmrmr@gmail.com> wrote: >>> Hi, >>> >>> I am using Shorewall shell on my Linux router. Basically the router >>> has 2 interfaces; ppp0 for wan , br0 for lan. >>> Under br0 bridge interface I have ath0 (wifi atheros) and eth2 interfaces. >>> >>> I have no performance problem on the lan clients which are connected >>> to eth2, but for the clients connected to ath0 wifi interface there is >>> a big performance issue. >>> >>> When there is no traffic on wifi interface, the client can ping the >>> router with 2ms response. But when the client starts any web browsing >>> or any oher traffic, the ping responses from the router go above >>> 1000ms or even 2000ms. >>> Of course data communication from the wifi clients are terribly slow. >>> The client seems to be connected with 54Mbps but it can''t go even up to 100kbps. >>> >>> It first seemed to be a trafffic shaping problem to me , so I moved >>> all tcrules, tcclasses and tcdevices files and restarted without any >>> traffic shaping. But that didn''t solve the issue. >>> >>> How can I troubleshoot this ? >>> >>> Below is some information from my linux router. I will send the >>> shorewall dump output in a seperate email. > > 4: wifi0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast > qlen 280 > link/ieee802.11 00:80:48:4f:21:8d brd ff:ff:ff:ff:ff:ff > RX: bytes packets errors dropped overrun mcast > 1143084 8705 0 0 0 0 > TX: bytes packets errors dropped carrier collsns > 7520750 13496 8274 0 0 0 > > That is a horrible error rate. Looks to me like a hardware or driver issue. > > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > > ------------------------------------------------------------------------------ > Enter the BlackBerry Developer Challenge > This is your chance to win up to $100,000 in prizes! For a limited time, > vendors submitting new applications to BlackBerry App World(TM) will have > the opportunity to enter the BlackBerry Developer Challenge. See full prize > details at: http://p.sf.net/sfu/Challenge > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Mekabe Ramein wrote:> Ok; then there is a driver issue , unless any hardware failure ? > I''ll submit a ticket to the Madwifi project group. > Do you have any information about Madwifi and mini-pci Atheros cards ? > What may have cause such failure ? > > (like unplugged antenna ?)I don''t have any experience with Madwifi. Sorry, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Thanks for your help. Just one more question before closing this. You are sure that this is not anyhow related with Shorewall or iptables, right ? It''s about driver or hardware for certain ? Thanks. On Sun, Jul 12, 2009 at 12:17 AM, Tom Eastep<teastep@shorewall.net> wrote:> Mekabe Ramein wrote: >> Ok; then there is a driver issue , unless any hardware failure ? >> I''ll submit a ticket to the Madwifi project group. >> Do you have any information about Madwifi and mini-pci Atheros cards ? >> What may have cause such failure ? >> >> (like unplugged antenna ?) > > I don''t have any experience with Madwifi. > > Sorry, > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > > ------------------------------------------------------------------------------ > Enter the BlackBerry Developer Challenge > This is your chance to win up to $100,000 in prizes! For a limited time, > vendors submitting new applications to BlackBerry App World(TM) will have > the opportunity to enter the BlackBerry Developer Challenge. See full prize > details at: http://p.sf.net/sfu/Challenge > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge
Mekabe Ramein wrote:> Thanks for your help. > Just one more question before closing this. You are sure that this is > not anyhow related with Shorewall or iptables, right ? > It''s about driver or hardware for certain ?Two things: - You have a very high send error rate. Shorwall/iptables can''t cause that. The error rates on the physical device are the *first* thing you should look at when you have performance issues on traffic through a particular interface. - You have not mentioned your wifi interface anywhere in the Shorewall configuration. How then could Shorewall/iptables be causing performance problems on that interface and not on eth2 (the other port on the bridge)? Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge