Hi George, Naw it's Virgin Cable for that very reason. I chewed my leg outta BT's Bear Trap years back. Desperate affair. Infrastructure and over-subscribing all over the place. I hit them witha 16 page report documenting Pings, Traceroutes, actual speed tests as aposed to the BS local proxy ISPs normally get you to use. They let us go with no charge and refunds on an 18 month contract. One of their glorified Sparks (no diss to Sparks my da was one for 40 years), mascaraiding as an Internet Engineer actually told me in the house "His laptop wasn't powerful enough to ping"! It's only been in the past week or so it's went to hell in a hand basket. Cheers, Barry.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of George Bell Sent: Friday, January 21, 2011 9:02 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Barry,

Is this cable or coming in via your telephone line?

I ask because I had a similar issue way back, and it turned out that the BT connection into the house was the problem. My ISP was NOT BT at the time, but as is often the case, the broadband used BT's lines.

BTW, I've now moved to Virgin cable.

George.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 21 January 2011 20:49 To: 'Blind sysadmins list' Subject: [Blind-sysadmins] Network troubleshooting

Hi all,

I've been pulling my hair out for the past week and a half. Suddenly our bandwidth dropped off. I'm on a 20MB connection and normally get 1.5 to 2.4MB/s download from fast servers like the BBC and Sendspace.com where I have a premium membership. I began to notice speeds of 93K, 21K, and on one freaky moment 4Bytes! After 6 phone calls to the lovely outsourced call centre. During which, I explained the drastic reduction in speed. Coupled with the fact that i had noticed I was losing packets. One 1st line Agent was able to see when he pinged my cable modem this was indeed happening. That it wasn't my hardware or the 6 computers I had at home. That I did know a tiny bit about computers and had confirmed that not only there was no hijackers on my WIFI, but that it didnt' make a difference whither I had my Netgear Router in the mix or was directly connected to the modem. Then after my ISP botched and ordered me two replacement modems the speeds flew back up to normal and life went on. Today i noticed during mudding lag had started again. I also noticed using Ventrilo I was getting insane ping rates. In the thousands.

I started some ping tests again. pinging on wifi, 36 pings, 28 recieved. min - 22ms, max 480ms, avg 46ms Is this normal and should I expect a loss of packets on WIFI when i'm getting full signal, (as I was sitting beside the router, have all my WIFI gear bar the IPhone as N Adaptors). I did lose approx 1 packet out of the standard 4 packet Windows ping test when connected to the Router wired, and the modem wired, this afternoon. I'm trying to figure out how to establish what is the problem and minimise my own expense in the process. I can take a hit on time but I dont' want to go out and buy a new router just to test. Should I buy all new Ethernet cables? Demand my ISP send an Engineer out to check the cable box, and pay the £30 fee if all's fine? Is there any decent networking troubleshooting tools you all recommend? At first I thought was because I was messing around with creating my own 2K8R2 server networking at home, then i realised it wasn't just the Server and the one laptop who was using it as it's Domain and DNS that were having problems. Web Pages were/are loading slowly. I've ruled out viral and malware infaltrations. I know no WIFI encryption is full proof but I'm using WPA2, TKIP, ASE, MAC Address Filtering, hiding the SID, checked the client tables on the router to see if any non-recognised addresses are popping up.

I'm at a loss as what more to do and don't want to go back to the ISP without as much concrete evidence as possible. BTW. I know they do throttle but this is for peer to peer s'fers between set hours. They say streaming, and browsing will not be effected. It's Virgin Media in the UK.

Cheers as this is driving me mental!

Barry

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Barry, oft times they'll listen if u go to their speed test site & report abysmal results. However, do check cables--I had that happen to me about a year ago wherein my modem cable was flakey & I was lookin for another ISP till I found the problem. On 1/21/11, Barry Toner wrote:

Hi Scott,

That's fantastic! That's exactly what I was looking for, real solid practical stuff there. Thanks loads. I might just get to keep some sanity after all! Good man!

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Friday, January 21, 2011 11:50 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Reading what you've put here I'm sure it's your provider but here's what you do.

Execute a ping directly from the router to the next hop gateway on the providers network. Use traceroute to figure this out and or the gateway statement in your router that you entered or was updated by dhcp.

Send like 1000 pings of a standard size, you should get 0 (zero) loss. Ping times shold range between 1 and 20 MS and no higher assuming a multi megabit connection. If you get loss on this segment you can tell your provider that you're losing packets between your head end device and their network. As for the WiFi, under normal conditions you should never see that much loss. You might be to close so back up across the room but honestly there should be no loss. To test this ping from your end device to the lan interface on your router (the gateway shown on the dhcp entry for your laptop) and see if you get loss. If no loss you know that segment is clean. If you got the same problem using a wire though I'm certain it's your modem / cable connection. Signal might not be strong enough and the modem can't get a link, cables degrade so this is worth checking.

As far as tools, NTR is good. It's trace route with more output.

Hope that helps.

On Jan 21, 2011, at 12:48 PM, Barry Toner wrote:

...

Hi all,

I've been pulling my hair out for the past week and a half. Suddenly our bandwidth dropped off. I'm on a 20MB connection and normally get 1.5 to 2.4MB/s download from fast servers like the BBC and Sendspace.com where I have a premium membership. I began to notice speeds of 93K, 21K, and on one freaky moment 4Bytes! After 6 phone calls to the lovely outsourced call centre. During which, I explained the drastic reduction in speed. Coupled with the fact that i had noticed I was losing packets. One 1st line Agent was able to see when he pinged my cable modem this was indeed happening. That it wasn't my hardware or the 6 computers I had at home. That I did know a tiny bit about computers and had confirmed that not only there was no hijackers on my WIFI, but that it didnt' make a difference whither I had my Netgear Router in the mix or was directly connected to the modem. Then after my ISP botched and ordered me two replacement modems the speeds flew back up to normal and life went on. Today i noticed during mudding lag had started again. I also noticed using Ventrilo I was getting insane ping rates. In the thousands.

I started some ping tests again. pinging on wifi, 36 pings, 28 recieved. min - 22ms, max 480ms, avg 46ms Is this normal and should I expect a loss of packets on WIFI when i'm getting full signal, (as I was sitting beside the router, have all my WIFI gear bar the IPhone as N Adaptors). I did lose approx 1 packet out of the standard 4 packet Windows ping test when connected to the Router wired, and the modem wired, this afternoon. I'm trying to figure out how to establish what is the problem and minimise my own expense in the process. I can take a hit on time but I dont' want to go out and buy a new router just to test. Should I buy all new Ethernet cables? Demand my ISP send an Engineer out to check the cable box, and pay the £30 fee if all's fine? Is there any decent networking troubleshooting tools you all recommend? At first I thought was because I was messing around with creating my own 2K8R2 server networking at home, then i realised it wasn't just the Server and the one laptop who was using it as it's Domain and DNS that were having problems. Web Pages were/are loading slowly. I've ruled out viral and malware infaltrations. I know no WIFI encryption is full proof but I'm using WPA2, TKIP, ASE, MAC Address Filtering, hiding the SID, checked the client tables on the router to see if any non-recognised addresses are popping up.

I'm at a loss as what more to do and don't want to go back to the ISP without as much concrete evidence as possible. BTW. I know they do throttle but this is for peer to peer s'fers between set hours. They say streaming, and browsing will not be effected. It's Virgin Media in the UK.

Cheers as this is driving me mental!

Barry

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-- Change the world--1 deed at a time Jackie McBride Scripting Classes: http://jawsscripting.lonsdalemedia.org homePage: www.abletec.serverheaven.net For technophobes: www.technophoeb.com

Hi You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth. Caveats before we start. some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc. Lets discuss basic networking troubleshooting and this will assist. the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later. firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine. 1. Under windows. Use the ping command form the dos prompt. ping -n 1000 -l 1500 <ip address> The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests. If this all works fine after testing different packet sizes. Then you can say your local network is fine. 2. Test your Next hop as have been suggested before. A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions. A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address. I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop. B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router. If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything. Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted. Sean

What kind of router is it and how is it configured? These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router? On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, Are you on latest firmware? Have you connected PC to cable modem directly? Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 12:53 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi, I dont' think it's the PC's config because all of them are having the problem. But I'm certainly willing to check, but where? The router info, (shout if you need more) is. A NETGEAR RangeMaxT NEXT Wireless Router WNR854T It's connected to a Cable Modem. The Router is also an Wireless AP. Firmware Version 1.4.38 Internet Port MAC Address 00:18:4D:22:2E:E9 IP Address 81.99.169.75 DHCP DHCP Client IP Subnet Mask 255.255.254.0 Domain Name Server 194.168.4.100 LAN Port MAC Address 00:18:4D:22:2E:E8 IP Address 192.168.1.1 DHCP ON IP Subnet Mask 255.255.255.0 Wireless Port Name (SSID) Pooh Corner Region Europe Channel Auto Mode Up to 300 Mbps Wireless AP ON Broadcast Name EnabledSecurity Options: WPA-PSK [TKIP] + WPA2-PSK [AES]

From the connection status tab- IP Address 81.99.169.75 Subnet Mask 255.255.254.0 Default Gateway 81.99.168.1 DHCP Server 81.99.168.1 DNS Server 194.168.4.100 Lease Obtained 3 days,14 hrs,17 minutes Lease Expires 2 days,5 hrs,46 minutes

Last week I did suspect the Router config and reset to factory defaults, and went back through the config. Cheers, Barry.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 2:45 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

What kind of router is it and how is it configured?

These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router?

On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

...

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read

...

hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop

...

your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router.

...

IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to

Regards, Barry. the that the the

...

Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, Yes, here is the product page for the router: http://www.netgear.co.uk/rangemaxnext_wirelessrouters_wnr854t.php Here is the support home page: http://kb.netgear.com/app/products/model/a_id/2619 The firmware link is there and it gets you to the same place you posted. Download the version for non-US customers, apply it using a wired connection. I always reset Netgear routers after upgrading firmware, and in this case there is a paragraph in the release notes that says you have to do this. I had a user who had slow ADSL, upgrading the router changed the ADSL modem firmware, but it didn't become fully active until a reset. Good luck. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 13:18 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi Andrew, I'm going to connect directly to the modem in about half an hour. Firmware wise it hasnt' been updated since I got it about 2 or so years back. The auto check never worked. Just now, I went to netgear.co.uk, clicked on Support and scrolling down the lists can't find my WNR8 Router. A google search found this, I think this is the FW I want here? http://kb.netgear.com/app/answers/detail/a_id/9962/~/wnr854t-firmware-versio n-1.4.38 If you have two minutes can you check as I dont' want to brick the Router. It's been a few years since I upgraded Firmware and used to do this on WRT54G's, (now those were solid little babys), I presume it it messes up it's the standard pin and find the hard-reset button on the Router, hold for 30secs and let it reboot? BTW. That page has an International and US, so I'll grab the Int. Cheers, Barry.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 1:04 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Are you on latest firmware? Have you connected PC to cable modem directly?

Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 12:53 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

I dont' think it's the PC's config because all of them are having the problem. But I'm certainly willing to check, but where? The router info, (shout if you need more) is. A NETGEAR RangeMaxT NEXT Wireless Router WNR854T It's connected to a Cable Modem. The Router is also an Wireless AP. Firmware Version 1.4.38

Internet Port MAC Address 00:18:4D:22:2E:E9 IP Address 81.99.169.75 DHCP DHCP Client IP Subnet Mask 255.255.254.0 Domain Name Server 194.168.4.100 LAN Port MAC Address 00:18:4D:22:2E:E8 IP Address 192.168.1.1 DHCP ON IP Subnet Mask 255.255.255.0 Wireless Port Name (SSID) Pooh Corner Region Europe Channel Auto Mode Up to 300 Mbps Wireless AP ON Broadcast Name EnabledSecurity Options: WPA-PSK [TKIP] + WPA2-PSK [AES]

From the connection status tab- IP Address 81.99.169.75 Subnet Mask 255.255.254.0 Default Gateway 81.99.168.1 DHCP Server 81.99.168.1 DNS Server 194.168.4.100 Lease Obtained 3 days,14 hrs,17 minutes Lease Expires 2 days,5 hrs,46 minutes

Last week I did suspect the Router config and reset to factory defaults, and went back through the config.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 2:45 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

What kind of router is it and how is it configured?

These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router?

On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

...

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read

...

hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop

...

your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router.

...

IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to

...

Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only

...

ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the

Regards, Barry. the that the the perform a lite

...

hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi Scott, Do you mean ping the Cable modems address from the router or the ISP Gateway shown in the routers connection status? EG, 81 . 99 . 168 . 1 Cheers, Barry

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 10:45 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Barry, when you ping from the router to the gateway address, do you get any loss?

Also, are the wireless adapters you're using netgear and do they match the router. That extended speed stuff you have enabled can be problematic. You might set the whole thing to G with the most basic settings just as a test. If you get wired connectivity problems though that doesn't answer that. You might try plugging a PC right in to the modem removing the router and seeing how that performance is.

On Jan 23, 2011, at 4:53 AM, Barry Toner wrote:

...

Hi,

I dont' think it's the PC's config because all of them are having the problem. But I'm certainly willing to check, but where? The router info, (shout if you need more) is. A NETGEAR RangeMaxT NEXT Wireless Router WNR854T It's connected to a Cable Modem. The Router is also an Wireless AP. Firmware Version 1.4.38

Internet Port MAC Address 00:18:4D:22:2E:E9 IP Address 81.99.169.75 DHCP DHCP Client IP Subnet Mask 255.255.254.0 Domain Name Server 194.168.4.100 LAN Port MAC Address 00:18:4D:22:2E:E8 IP Address 192.168.1.1 DHCP ON IP Subnet Mask 255.255.255.0 Wireless Port Name (SSID) Pooh Corner Region Europe Channel Auto Mode Up to 300 Mbps Wireless AP ON Broadcast Name EnabledSecurity Options: WPA-PSK [TKIP] + WPA2-PSK [AES]

From the connection status tab- IP Address 81.99.169.75 Subnet Mask 255.255.254.0 Default Gateway 81.99.168.1 DHCP Server 81.99.168.1 DNS Server 194.168.4.100 Lease Obtained 3 days,14 hrs,17 minutes Lease Expires 2 days,5 hrs,46 minutes

Last week I did suspect the Router config and reset to factory defaults, and went back through the config.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 2:45 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

What kind of router is it and how is it configured?

These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router?

On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

...

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read

...

hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop

...

your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router.

...

IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem

...

into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to

...

Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only

Regards, Barry. the that the plugs the perform a

...

ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Barry, Might just be worth a quick shuffty at the following: http://kb.netgear.com/app/answers/detail/a_id/1153 George. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 23:04 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi Scott, Do you mean ping the Cable modems address from the router or the ISP Gateway shown in the routers connection status? EG, 81 . 99 . 168 . 1 Cheers, Barry

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-

sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 10:45 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Barry, when you ping from the router to the gateway address, do you get any loss?

Also, are the wireless adapters you're using netgear and do they match the router. That extended speed stuff you have enabled can be problematic. You might set the whole thing to G with the most basic

settings just as a test. If you get wired connectivity problems though that doesn't answer that. You might try plugging a PC right in to the modem removing the router and seeing how that performance is.

On Jan 23, 2011, at 4:53 AM, Barry Toner wrote:

...

Hi,

I dont' think it's the PC's config because all of them are having the problem. But I'm certainly willing to check, but where? The router info, (shout if you need more) is. A NETGEAR RangeMaxT NEXT Wireless Router WNR854T It's connected to a Cable Modem. The Router is also an Wireless AP. Firmware Version 1.4.38

Internet Port MAC Address 00:18:4D:22:2E:E9 IP Address 81.99.169.75 DHCP DHCP Client IP Subnet Mask 255.255.254.0 Domain Name Server 194.168.4.100 LAN Port MAC Address 00:18:4D:22:2E:E8 IP Address 192.168.1.1 DHCP ON IP Subnet Mask 255.255.255.0 Wireless Port Name (SSID) Pooh Corner Region Europe Channel Auto Mode Up to 300 Mbps Wireless AP ON Broadcast Name EnabledSecurity Options: WPA-PSK [TKIP] + WPA2-PSK [AES]

From the connection status tab- IP Address 81.99.169.75 Subnet Mask 255.255.254.0 Default Gateway 81.99.168.1 DHCP Server 81.99.168.1 DNS Server 194.168.4.100 Lease Obtained 3 days,14 hrs,17 minutes Lease Expires 2 days,5 hrs,46 minutes

Last week I did suspect the Router config and reset to factory defaults, and went back through the config.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 2:45 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

What kind of router is it and how is it configured?

These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router?

On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

...

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read

...

hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop

...

your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router.

...

IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem

Regards, Barry. the that the plugs

...

into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the

...

...

...

...

necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router

...

...

...

...

to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in

...

...

...

...

the CoAx cable, ensure you don't tighten it to much because you

...

...

...

...

might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

----- Original Message ----- From: "Scott Granados" To: "Blind sysadmins list" Sent: Sunday, January 23, 2011 4:45 PM Subject: Re: [Blind-sysadmins] Network troubleshooting

Barry, when you ping from the router to the gateway address, do you get any loss?

Also, are the wireless adapters you're using netgear and do they match the router. That extended speed stuff you have enabled can be problematic. You might set the whole thing to G with the most basic settings just as a test. If you get wired connectivity problems though that doesn't answer that. You might try plugging a PC right in to the modem removing the router and seeing how that performance is.

On Jan 23, 2011, at 4:53 AM, Barry Toner wrote:

...

Hi,

I dont' think it's the PC's config because all of them are having the problem. But I'm certainly willing to check, but where? The router info, (shout if you need more) is. A NETGEAR RangeMaxT NEXT Wireless Router WNR854T It's connected to a Cable Modem. The Router is also an Wireless AP. Firmware Version 1.4.38

Internet Port MAC Address 00:18:4D:22:2E:E9 IP Address 81.99.169.75 DHCP DHCP Client IP Subnet Mask 255.255.254.0 Domain Name Server 194.168.4.100 LAN Port MAC Address 00:18:4D:22:2E:E8 IP Address 192.168.1.1 DHCP ON IP Subnet Mask 255.255.255.0 Wireless Port Name (SSID) Pooh Corner Region Europe Channel Auto Mode Up to 300 Mbps Wireless AP ON Broadcast Name EnabledSecurity Options: WPA-PSK [TKIP] + WPA2-PSK [AES]

From the connection status tab- IP Address 81.99.169.75 Subnet Mask 255.255.254.0 Default Gateway 81.99.168.1 DHCP Server 81.99.168.1 DNS Server 194.168.4.100 Lease Obtained 3 days,14 hrs,17 minutes Lease Expires 2 days,5 hrs,46 minutes

Last week I did suspect the Router config and reset to factory defaults, and went back through the config.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Sunday, January 23, 2011 2:45 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

What kind of router is it and how is it configured?

These numbers do not look right to me. Are you sure the duplex is set correctly on your pc or the router?

On Jan 22, 2011, at 4:16 PM, Barry Toner wrote:

...

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read

...

hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop

...

your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router.

...

IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to

Regards, Barry. the that the the

...

Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms. I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router? Cheers, Barry. Cheers, Barry.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using the same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem directly?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, No real speed diff's when it's first rebooted to be honest. I've done the upgrade now, reset using a pin on the back of the Router and same speeds on the downloads in the three connection scenarios. I used to get around 1.3MB/s even on WIFI at the other end of the house. Up until aweek or so back. Cheers, Barry.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 2:54 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Try the upgrade first, other thing is do you notice a spead difference when the router is first rebooted?

Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 14:49 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

I've ran the test directly connected to the cable modem Ping -n 1000 - 1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms.

I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms

I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router?

Cheers, Barry.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using the same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem directly?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem

...

into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have

...

cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either

Regards, Barry. plugs problems. The the

...

ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, If you are talking about buying a new router I have always had good luck with the Draytek products. They have enterprise features and although slightly more expensive than the home models are worth the money. I had a Cisco wireless access point recently, and got double the range when I converted to a Draytek access point. I used their routers exclusively until a few years ago when I changed to Cisco for learning the Cisco command line, although Cisco are good they don't have nearly the bang for the buck that the Draytek stuff has imho. Thanks. Andrew. ________________________________________ From: blind-sysadmins-bounces@lists.hodgsonfamily.org [blind-sysadmins-bounces@lists.hodgsonfamily.org] on behalf of Scott Granados [scott@granados-llc.net] Sent: 23 January 2011 22:48 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting I'm very certain your Netgear doesn't have anywhere near the forwarding rate you need to get 20+ megabits. I had to go with a DLink extreme to get the most out of my 100 megabit cable here. You also might think about buying some used enterprise gear on ebay both to learn and for better performance. If you want to keep it inexpensive I'v ehad good luck with the DLink DIR-655. On Jan 23, 2011, at 6:48 AM, Barry Toner wrote:

Hi,

I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms.

I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms

I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router?

Cheers, Barry.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using the same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem directly?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to the protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, January 24, 2011 11:20 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

If you are talking about buying a new router I have always had good luck with the Draytek products. They have enterprise features and although slightly more expensive than the home models are worth the money.

I had a Cisco wireless access point recently, and got double the range when I converted to a Draytek access point. I used their routers exclusively until a few years ago when I changed to Cisco for learning the Cisco command line, although Cisco are good they don't have nearly the bang for the buck that the Draytek stuff has imho.

Thanks. Andrew.

________________________________________ From: blind-sysadmins-bounces@lists.hodgsonfamily.org [blind-sysadmins- bounces@lists.hodgsonfamily.org] on behalf of Scott Granados [scott@granados-llc.net] Sent: 23 January 2011 22:48 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

I'm very certain your Netgear doesn't have anywhere near the forwarding rate you need to get 20+ megabits.

I had to go with a DLink extreme to get the most out of my 100 megabit cable here.

You also might think about buying some used enterprise gear on ebay both to learn and for better performance.

If you want to keep it inexpensive I'v ehad good luck with the DLink DIR-655.

On Jan 23, 2011, at 6:48 AM, Barry Toner wrote:

...

Hi,

I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms.

I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms

I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router?

Cheers, Barry.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using

...

...

same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem

...

...

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org

...

sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to

[mailto:blind- the

...

...

protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in

...

...

...

Firewall. You might want to keep it simple and shut down the firewall on

...

...

...

PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have

...

...

The

...

cable from your router to the Cable Modem. The connection from

...

...

...

cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching

...

...

...

CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in

Hi Barry, I'll second what Andrew says about Draytek routers. Andrew advised me to use them yonks ago, and we've never looked back. Unfortunately, when we moved from a BT line to Virgin Cable at home, they supplied a Netgear, which has already been replaced once in the last year. One of these days I'll get down to finding out if it can be replaced with a Draytek, my concern being that the Netgear is a unit which appears to be specifically modified for Virgin customers. However the office Draytek just seems to keep going and going 24/365. George. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 24 January 2011 11:29 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi, The thing I can't shake off is that this router served me well with 20MB for the past two years. So although it may be on it's way out it was certainly capable of the speeds delivered by my ISP. I cant' seem to find a Diogs page in the config.. and I must have hit every link at least 3 times. Draytek is a name I've heard over and over in the past year. I suppose if I'm going to spend £70 on a Netgear I might as well pay an extra £30 or so and get a Draytek. Finally, giving the information thus far does it look like the Routers needing replaced? Cheers all for your help. This has hopefully provided a useful thread for everyone. Regards, Barry. the directly? the the problems. the the the

...

...

...

CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, January 24, 2011 11:20 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

If you are talking about buying a new router I have always had good luck with the Draytek products. They have enterprise features and although slightly more expensive than the home models are worth the money.

I had a Cisco wireless access point recently, and got double the range when I converted to a Draytek access point. I used their routers exclusively until a few years ago when I changed to Cisco for learning the Cisco command line, although Cisco are good they don't have nearly the bang for the buck that the Draytek stuff has imho.

Thanks. Andrew.

________________________________________ From: blind-sysadmins-bounces@lists.hodgsonfamily.org [blind-sysadmins- bounces@lists.hodgsonfamily.org] on behalf of Scott Granados [scott@granados-llc.net] Sent: 23 January 2011 22:48 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

I'm very certain your Netgear doesn't have anywhere near the forwarding rate you need to get 20+ megabits.

I had to go with a DLink extreme to get the most out of my 100 megabit cable here.

You also might think about buying some used enterprise gear on ebay both to learn and for better performance.

If you want to keep it inexpensive I'v ehad good luck with the DLink DIR-655.

On Jan 23, 2011, at 6:48 AM, Barry Toner wrote:

...

Hi,

I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms.

I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms

I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router?

Cheers, Barry.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using

...

...

same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem

...

...

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org

...

sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to

[mailto:blind- the

...

...

protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in

...

...

...

Firewall. You might want to keep it simple and shut down the firewall on

...

...

...

PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have

...

...

The

...

cable from your router to the Cable Modem. The connection from

...

...

...

cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching

...

...

...

CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in

Hi, The Draytek 2100 range is for cable modem customers and gives the standard SOHO feature set. There are voice models as well for extra cost. Check out seg.co.uk for good pricing. I can't give you a definitive answer as to whether the router is the issue or not, did you say you tried a different cable between the router and cable modem, and did you try all the tests without using wireless? Andrew. ________________________________________ From: blind-sysadmins-bounces@lists.hodgsonfamily.org [blind-sysadmins-bounces@lists.hodgsonfamily.org] on behalf of George Bell [george@techno-vision.co.uk] Sent: 24 January 2011 11:41 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting Hi Barry, I'll second what Andrew says about Draytek routers. Andrew advised me to use them yonks ago, and we've never looked back. Unfortunately, when we moved from a BT line to Virgin Cable at home, they supplied a Netgear, which has already been replaced once in the last year. One of these days I'll get down to finding out if it can be replaced with a Draytek, my concern being that the Netgear is a unit which appears to be specifically modified for Virgin customers. However the office Draytek just seems to keep going and going 24/365. George. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 24 January 2011 11:29 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi, The thing I can't shake off is that this router served me well with 20MB for the past two years. So although it may be on it's way out it was certainly capable of the speeds delivered by my ISP. I cant' seem to find a Diogs page in the config.. and I must have hit every link at least 3 times. Draytek is a name I've heard over and over in the past year. I suppose if I'm going to spend £70 on a Netgear I might as well pay an extra £30 or so and get a Draytek. Finally, giving the information thus far does it look like the Routers needing replaced? Cheers all for your help. This has hopefully provided a useful thread for everyone. Regards, Barry. the directly? the the problems. the the the

...

...

...

CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Just call up Beardy Branson and tell him you're using your own router. hahaha :) On Jan 24, 2011, at 3:41 AM, George Bell wrote:

Hi Barry,

I'll second what Andrew says about Draytek routers. Andrew advised me to use them yonks ago, and we've never looked back.

Unfortunately, when we moved from a BT line to Virgin Cable at home, they supplied a Netgear, which has already been replaced once in the last year. One of these days I'll get down to finding out if it can be replaced with a Draytek, my concern being that the Netgear is a unit which appears to be specifically modified for Virgin customers.

However the office Draytek just seems to keep going and going 24/365.

George.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 24 January 2011 11:29 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

The thing I can't shake off is that this router served me well with 20MB for the past two years. So although it may be on it's way out it was certainly capable of the speeds delivered by my ISP.

I cant' seem to find a Diogs page in the config.. and I must have hit every link at least 3 times.

Draytek is a name I've heard over and over in the past year. I suppose if I'm going to spend £70 on a Netgear I might as well pay an extra £30 or so and get a Draytek. Finally, giving the information thus far does it look like the Routers needing replaced?

Cheers all for your help. This has hopefully provided a useful thread for everyone.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Monday, January 24, 2011 11:20 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

If you are talking about buying a new router I have always had good luck with the Draytek products. They have enterprise features and although slightly more expensive than the home models are worth the money.

I had a Cisco wireless access point recently, and got double the range when I converted to a Draytek access point. I used their routers exclusively until a few years ago when I changed to Cisco for learning the Cisco command line, although Cisco are good they don't have nearly the bang for the buck that the Draytek stuff has imho.

Thanks. Andrew.

________________________________________ From: blind-sysadmins-bounces@lists.hodgsonfamily.org [blind-sysadmins- bounces@lists.hodgsonfamily.org] on behalf of Scott Granados [scott@granados-llc.net] Sent: 23 January 2011 22:48 To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

I'm very certain your Netgear doesn't have anywhere near the forwarding rate you need to get 20+ megabits.

I had to go with a DLink extreme to get the most out of my 100 megabit cable here.

You also might think about buying some used enterprise gear on ebay both to learn and for better performance.

If you want to keep it inexpensive I'v ehad good luck with the DLink DIR-655.

On Jan 23, 2011, at 6:48 AM, Barry Toner wrote:

...

Hi,

I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms.

I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms

I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router?

Cheers, Barry.

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using

...

...

...

same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem

...

...

...

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org

...

sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to

[mailto:blind- the

...

...

protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in

...

...

...

...

Firewall. You might want to keep it simple and shut down the firewall on

...

...

...

...

PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have

...

...

...

The

...

cable from your router to the Cable Modem. The connection from

...

...

...

...

cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching

...

...

...

...

CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in

Regards, Barry. the directly? the the problems. the the the

...

...

...

...

CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Andrew Hodgson Sent: Sunday, January 23, 2011 11:05 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi,

Something is definitely up there. Here is a ping session using the same command that I ran from a netbook on the other side of the house from the wireless point:

Ping statistics for 192.168.1.1: Packets: Sent = 1000, Received = 1000, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 11ms, Average = 0ms

If this was through wireless, is the AP provided on the router itself? Have you done a similar test connecting to the cable modem directly?

Thanks. Andrew.

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: 23 January 2011 00:17 To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi Sean and all.

Firstly Sean thank you very much for your detailed steps and explainations. I will sit down and go through this over a morning or so to do it justice. In the mean time I've pingged my router using, Ping -n 1000 RouterIP The results were Sent 1000, Recieved 974. Min - 1ms, Max 3215ms, Avg - 92ms.

I then pingged within 30minutes after the first test using the full packet size -l 1500 Ping -n 1000 -l 1500 RouterAddress The results were Sent 1000, Recieved 1000 Min 2ms, max 2338ms, avg 11ms BTW. I tested this ping over WIFI in another part of the house from the AP. I will test it having my Laptop hardwired into the Router and report back.

Does this tell me without going any further that the Router might be the issue here? I've new cables in the post... Should I possibly be thinking about adding a new router to this? The strange thing is after calling my ISP last week the net was fine for about 4 days then fell off again. This is why I've been so feerce in my convictions it wasn't my hardware.

Regards, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Sean Murphy Sent: Saturday, January 22, 2011 1:37 AM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Hi

You need to isolate where the packet loss is occurring. It appears you have done some work already. but I shall go over it again. Please read the hwhole mail before doing anything. I work in the networking industry, so I will go into some depth.

Caveats before we start.

some providers and network devices do not honour ICMP echo's and drop them to prevent DDOS attacks. therefore, you will sometimes not get the ICMP reply. The other thing is there is many different ways of configuring a PPP (Point to Point Protocol) connection by your ISP and the next hop that your router see's might go through other routers or networking devices before hand. But you cannot see this due to

Hi, MTU can be an issue with DSL connections in the UK as well, some providers will work better if the MTU is set lower (TalkTalk for example). Not sure about using cable modems, it may be worth playing with that a bit. Here is a good forum post which looks interesting: http://www.avforums.com/forums/ps3-playstation-network-help-setup/910107-ps3... You may need to do these tests on the cable modem directly without a router connected, start working from a packet size of 1472 then decrease. Try also a larger packet size to see if fragmentation occurs. Andrew. -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Vic.Pereira@ic.gc.ca Sent: 24 January 2011 15:16 To: blind-sysadmins@lists.hodgsonfamily.org Subject: Re: [Blind-sysadmins] Network troubleshooting Hello Barry Regarding wireless routers, it seems that after two years or more, things start to deteriorate. I've asked some electrical engineers here at work, and they agree that equipment for home use doesn't seem last as long as commercial grade equipment. They are not certain why that is, but wireless routers that are continuously transmitting and receiving 24/7 start to have a high failure rate after two years of service. Heat build-up? solder connections loosening up? Sorry, but I don't have any answers either. All I know for certain is that I am on my third wireless router. My first one began running very hot after about two years. And my second was a piece of junk. My current one, a .N router, appears to be running very well. Even better since I've switched from DSL to a cable modem. I was having problems with my previous ISP. It was related to the MTU settings, maximum transmission units. It seemed as soon as another PC in our house connected our connection began to go up and down. A new DSL modem didn't fix the problem, however changing to another ISP did. Vic -----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Barry Toner Sent: Sunday, January 23, 2011 8:49 AM To: 'Blind sysadmins list' Subject: Re: [Blind-sysadmins] Network troubleshooting Hi, I've ran the test directly connected to the cable modem Ping -n 1000 -1500 192.168.100.1 This is my modems Gateway address. Sent 1000, Recieved, 1000 Min, 2ms, max, 5ms, avg, 2ms. I then pingged the router wired into it, Sent, 1000, Recieved,1000 Min, 0ms, max, 40ms, avg, 1ms I thought I'd try some downloads where I know I get speeds in the 20MB range. Connected to modem wired, 2.3MB/s. WIFI To Router, 300K. Connected to Router Wired, 500K. I ran these download tests a few times. New router? Cheers, Barry. Cheers, Barry. the

...

protocols they are using. Such as LAC, DVPN, etc.

Lets discuss basic networking troubleshooting and this will assist.

the Ping command works at the layer 3 level. It does not test TcP level. This can be done easily enough but I will explain later.

firstly, you need to check your local network to varify it is all working with no packet loss. I shall not talk about Wireless, since there are to many factors that can cause packet loss. If the wired (Ehternet cat 5/6) is working fine. Then you can assume your local router/switch is fine.

1. Under windows. Use the ping command form the dos prompt.

ping -n 1000 -l 1500 <ip address>

The above is sending a full packet through your network. If you get no packet loss, then there are no MTU issues.Try different length sizes to see if you get any packet loss. This is important to test your router. the IP address should be your local IP addresses for the different machines. Make sure your local machines except ICMP echo and sends replies in the Firewall. You might want to keep it simple and shut down the firewall on the PC's until you are complete with the tests.

If this all works fine after testing different packet sizes. Then you can say your local network is fine.

2. Test your Next hop as have been suggested before.

A) If your setup is a dedicated cable modem and then the modem plugs into the router. The modem is in Bridge mode which means you will receive the IP address sent by your provider after the modem has performed the necessary training to learn the different frequencys to send/receive data. There is 2 areas where you could have problems. The cable from your router to the Cable Modem. The connection from the cable modem to the ISP. Try the below suggestions.

A) Connect your PC directly to the Cable modem Ethernet port. B) Ping the provided IP address from your provider with the same command previously provided. If you get drops. Then it is either the ISP Cable plant or the modem. C) Remove the Coax cable from the cable modem. Make sure the modem is turned off first. D). turn the modem back on. You now should get a private IP address on your PC. Ping this address using the above example. If this all passes. Then you have narrowed down the issue. E). Before re-connecting the Coax. Earth it by gently touching the CoAx inner pin against something that is metal to ground it. Ensure the modem is turned off. Then Plug it back in. When screwing in the CoAx cable, ensure you don't tighten it to much because you might damage the cable. It should be able to be unscrewed by your hand. F) Power up the modem again. Ensure you get the IP address that your provided provides, not the private address I mention before. Perform another ping to your providers gateway address.

I for got to mention how you find out the gateway address. When you are connected to the ISP. Drop to the DOS (command prompt). Enter in ipconfig. Look for your Ethernet port that your cable modem is connected too. You will see "gateway". this is the address you want to ping. If you don't get that, then you can try traceroute. But this will only give you the first router that replies. This doesn't mean it is the first hop.

B) If you have a combo Cable Modem/router. There might be a ping test within the router. Check this out. If it doesn't then you can only perform a ping to the Public IP address that is shown on the router.

If you have a specific site that you see more drops than others. Then perform a traceroute to that IP address. Take note of all IP addressses. Then ping each address that is shown as previously mention. this will isolate which IP address the packet drops start. But will not resolve the issue because now it is out of your hand. You can mention it to your ISP. But if it isn't in their network, they will more than likely not do anything.

Anything else beyond the above basic test require packet captures by using Tshark which is within Wireshark. This is not for the lite hearted.

Sean

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Thanks, Sean's response was also on the money. Add that to mine and I think you should be in good shape. On Jan 21, 2011, at 4:52 PM, Barry Toner wrote:

Hi Scott,

That's fantastic! That's exactly what I was looking for, real solid practical stuff there. Thanks loads. I might just get to keep some sanity after all! Good man!

Cheers, Barry.

...

-----Original Message----- From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind- sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Scott Granados Sent: Friday, January 21, 2011 11:50 PM To: Blind sysadmins list Subject: Re: [Blind-sysadmins] Network troubleshooting

Reading what you've put here I'm sure it's your provider but here's what you do.

Execute a ping directly from the router to the next hop gateway on the providers network. Use traceroute to figure this out and or the gateway statement in your router that you entered or was updated by dhcp.

Send like 1000 pings of a standard size, you should get 0 (zero) loss. Ping times shold range between 1 and 20 MS and no higher assuming a multi megabit connection. If you get loss on this segment you can tell your provider that you're losing packets between your head end device and their network. As for the WiFi, under normal conditions you should never see that much loss. You might be to close so back up across the room but honestly there should be no loss. To test this ping from your end device to the lan interface on your router (the gateway shown on the dhcp entry for your laptop) and see if you get loss. If no loss you know that segment is clean. If you got the same problem using a wire though I'm certain it's your modem / cable connection. Signal might not be strong enough and the modem can't get a link, cables degrade so this is worth checking.

As far as tools, NTR is good. It's trace route with more output.

Hope that helps.

On Jan 21, 2011, at 12:48 PM, Barry Toner wrote:

...

Hi all,

I've been pulling my hair out for the past week and a half. Suddenly our bandwidth dropped off. I'm on a 20MB connection and normally get 1.5 to 2.4MB/s download from fast servers like the BBC and Sendspace.com where I have a premium membership. I began to notice speeds of 93K, 21K, and on one freaky moment 4Bytes! After 6 phone calls to the lovely outsourced call centre. During which, I explained the drastic reduction in speed. Coupled with the fact that i had noticed I was losing packets. One 1st line Agent was able to see when he pinged my cable modem this was indeed happening. That it wasn't my hardware or the 6 computers I had at home. That I did know a tiny bit about computers and had confirmed that not only there was no hijackers on my WIFI, but that it didnt' make a difference whither I had my Netgear Router in the mix or was directly connected to the modem. Then after my ISP botched and ordered me two replacement modems the speeds flew back up to normal and life went on. Today i noticed during mudding lag had started again. I also noticed using Ventrilo I was getting insane ping rates. In the thousands.

I started some ping tests again. pinging on wifi, 36 pings, 28 recieved. min - 22ms, max 480ms, avg 46ms Is this normal and should I expect a loss of packets on WIFI when i'm getting full signal, (as I was sitting beside the router, have all my WIFI gear bar the IPhone as N Adaptors). I did lose approx 1 packet out of the standard 4 packet Windows ping test when connected to the Router wired, and the modem wired, this afternoon. I'm trying to figure out how to establish what is the problem and minimise my own expense in the process. I can take a hit on time but I dont' want to go out and buy a new router just to test. Should I buy all new Ethernet cables? Demand my ISP send an Engineer out to check the cable box, and pay the £30 fee if all's fine? Is there any decent networking troubleshooting tools you all recommend? At first I thought was because I was messing around with creating my own 2K8R2 server networking at home, then i realised it wasn't just the Server and the one laptop who was using it as it's Domain and DNS that were having problems. Web Pages were/are loading slowly. I've ruled out viral and malware infaltrations. I know no WIFI encryption is full proof but I'm using WPA2, TKIP, ASE, MAC Address Filtering, hiding the SID, checked the client tables on the router to see if any non-recognised addresses are popping up.

I'm at a loss as what more to do and don't want to go back to the ISP without as much concrete evidence as possible. BTW. I know they do throttle but this is for peer to peer s'fers between set hours. They say streaming, and browsing will not be effected. It's Virgin Media in the UK.

Cheers as this is driving me mental!

Barry

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins