Odd network issue
I'm have some issues while connected to the network on campus only. From
the moment I get connected to the wifi, bwm-ng is reporting I'm receiving nearly 50KB/s of traffic. I don't have a browsers open etc. Looking at tcpdump, I see a lot of this. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on wlan0, link-type EN10MB (Ethernet), capture size 96 bytes 16:14:19.205411 IP6 fe80::cddc:9baa:c287:41bc > ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 16:14:19.205416 00:22:41:98:8f:21 (oui Unknown) > 01:40:96:ff:ff:00 (oui Unknown), ethertype Unknown (0x872d), length 60: 0x0000: 0022 0202 0140 96ff ff00 0022 4198 8f21 ."...@....."A..! 0x0010: 0022 4198 8f21 000a b8cb 8b10 0000 0000 ."A..!.......... 0x0020: 0000 0000 0000 0000 0000 63ae 7db8 ..........c.}. 16:14:19.205536 arp who-has r30-133-73-207.wccnet.org tell r251-130-73-207.wccnet.org 16:14:19.205621 IP6 fe80::cddc:9baa:c287:41bc.59001 > ff02::1:3.hostmon: UDP, length 32 16:14:19.205627 IP r74-132-73-207.wccnet.org.62342 > 224.0.0.252.hostmon: UDP, length 32 16:14:19.246879 IP r214-130-73-207.wccnet.org.mdns > 224.0.0.251.mdns: 0 PTR (QM)? 168.139.73.207.in-addr.arpa. (45) 16:14:19.413743 IP6 fe80::444:c0df:351c:69f.54177 > ff02::1:3.hostmon: UDP, length 26 16:14:19.413858 IP r240-130-73-207.wccnet.org.54985 > 224.0.0.252.hostmon: UDP, length 26 16:14:19.413945 IP6 fe80::cddc:9baa:c287:41bc > ff02::16: HBH ICMP6, multicast listener report v2, 4 group record(s), length 88 16:14:19.414036 IP6 fe80::504f:2731:3f62:1637.546 > ff02::1:2.547: dhcp6 solicit 16:14:19.414042 arp who-has 207.73.139.96 tell 207.73.139.1 C1252 packets captured 8149 packets received by filter 6624 packets dropped by kernel With all this activity I can barely ssh to a machine, let alone surf the web. I look around at classmates who are running something other than *nix and they are all surfing away just fine. I don't know a whole lot about networking, which leaves me with not much of an idea on where to start on all of this. Any help would be really appreaciated. -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: 20101110212917.GA24956@shellium.org">http://lists.debian.org/20101110212917.GA24956@shellium.org |
Odd network issue
On Wed, 10 Nov 2010 16:29:17 -0500, gun_smoke wrote:
> I'm have some issues while connected to the network on campus only. From > the moment I get connected to the wifi, bwm-ng is reporting I'm > receiving nearly 50KB/s of traffic. I don't have a browsers open etc. > Looking at tcpdump, I see a lot of this. (...) Looks to me like all that is internal traffic coming from your AP, nothing strange. > With all this activity I can barely ssh to a machine, let alone surf the > web. I look around at classmates who are running something other than > *nix and they are all surfing away just fine. > > I don't know a whole lot about networking, which leaves me with not much > of an idea on where to start on all of this. Any help would be really > appreaciated. Mmm, your problem is that you cannot browse the web? Then perform the usual steps: ping -c 3 google.com dig google.com traceroute google.com :-) Greetings, -- Camaleón -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: pan.2010.11.11.10.06.14@gmail.com">http://lists.debian.org/pan.2010.11.11.10.06.14@gmail.com |
Odd network issue
On 11/10/2010 04:29 PM, gun_smoke@shellium.org wrote:
I'm have some issues while connected to the network on campus only. From the moment I get connected to the wifi, bwm-ng is reporting I'm receiving nearly 50KB/s of traffic. I don't have a browsers open etc. Looking at tcpdump, I see a lot of this. tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on wlan0, link-type EN10MB (Ethernet), capture size 96 bytes 16:14:19.205411 IP6 fe80::cddc:9baa:c287:41bc> ff02::16: HBH ICMP6, multicast listener report v2, 1 group record(s), length 28 16:14:19.205416 00:22:41:98:8f:21 (oui Unknown)> 01:40:96:ff:ff:00 (oui i<SNIP> C1252 packets captured 8149 packets received by filter 6624 packets dropped by kernel With all this activity I can barely ssh to a machine, let alone surf the web. I look around at classmates who are running something other than *nix and they are all surfing away just fine. I don't know a whole lot about networking, which leaves me with not much of an idea on where to start on all of this. Any help would be really appreaciated. What, if any, firewall do you have installed? I had the same problem here when I (finally) got a wireless setup. I tried a bunch of firewalls and and settled on arno-iptables-firewall and privoxy. Now I can surf the web and don't have many sites eating not only my bandwidth but also eating up my 5 Gig monthly allocation. HTH Wayne -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: 4CDC1FCC.2020403@gmail.com">http://lists.debian.org/4CDC1FCC.2020403@gmail.com |
Odd network issue
On Thu, Nov 11, 2010 at 11:54:36AM -0500, Wayne Topa wrote:
> > What, if any, firewall do you have installed? > > I had the same problem here when I (finally) got a wireless setup. > I tried a bunch of firewalls and and settled on > arno-iptables-firewall > and privoxy. > > Now I can surf the web and don't have many sites eating not only my > bandwidth but also eating up my 5 Gig monthly allocation. > > HTH > > Wayne I have shorewall installed with the following... ######################### I N T E R F A C E S ################################## #ZONE INTERFACE BROADCAST OPTIONS net wlan0 detect dhcp,tcpflags,logmartians,nosmurfs #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE ########################### P O L I C Y ######################################## #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST $FW net ACCEPT net $FW DROP info 1/sec:2 net all DROP info # The FOLLOWING POLICY MUST BE LAST all all REJECT info #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE ############################ R U L E S ######################################### #ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK # PORT PORT(S) # DEST # LIMIT # GROUP # Drop Ping from the "bad" net zone.. and prevent your log from being # flooded.. Ping/DROP net $FW # Permit all ICMP traffic FROM the firewall TO the net zone ACCEPT $FW net icmp # MY ENTRIES BitTorrent/ACCEPT net $FW SSH/ACCEPT net $FW tcp 12211 Ping/ACCEPT $FW net REJECT net:~1e:90:32:82:b2:08 $FW #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE ############################ Z O N E S ######################################### #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS fw firewall net ipv4 #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE I won't be back on campus until Monday if anyone has a need to see some additional log etc. I hope I can figure something out.. -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: 20101111193606.GA27040@shellium.org">http://lists.debian.org/20101111193606.GA27040@shellium.org |
Odd network issue
On Thu, Nov 11, 2010 at 10:06:14AM +0000, Camaleón wrote:
> > Mmm, your problem is that you cannot browse the web? Then perform the > usual steps: > > ping -c 3 google.com > dig google.com > traceroute google.com I can ping google. No packet loss, but the times are in the 1000-2000ms times. -- To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: 20101111194818.GA3937@shellium.org">http://lists.debian.org/20101111194818.GA3937@shellium.org |
| All times are GMT. The time now is 08:20 PM. |
VBulletin, Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.