Posted by breda on Jul 29, 2016; 7:41pm
URL: https://itus.accessinnov.com/Internet-speed-slower-in-bridge-mode-tp1123.html

Hi, we upgraded our internet speed to 100 Mbs and doing speed test with the Shield we are only getting  50.86 Mbs if  I bypass the shield I get a speed of 105.29 Mbs  here are some  of my logs and screen shots  any help would be appreciated











Fri Jul 29 12:26:58 2016 daemon.notice snort[9381]: 81 out of 1024 flowbits in use.
Fri Jul 29 12:27:01 2016 daemon.crit dnsmasq[9436]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Fri Jul 29 12:27:01 2016 daemon.crit dnsmasq[9436]: FAILED to start up
Fri Jul 29 12:27:06 2016 daemon.crit dnsmasq[9451]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Fri Jul 29 12:27:06 2016 daemon.crit dnsmasq[9451]: FAILED to start up
Fri Jul 29 12:27:06 2016 daemon.info procd: Instance dnsmasq::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: [ Port Based Pattern Matching Memory ]
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: +- [ Aho-Corasick Summary ] -------------------------------------
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Storage Format    : Full
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Finite Automaton  : DFA
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Alphabet Size     : 256 Chars
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Sizeof State      : Variable (1,2,4 bytes)
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Instances         : 89
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     1 byte states : 79
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     2 byte states : 10
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     4 byte states : 0
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Characters        : 56026
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | States            : 37567
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Transitions       : 2021513
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | State Density     : 21.0%
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Patterns          : 4051
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Match States      : 4142
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: | Memory (MB)       : 19.93
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |   Patterns        : 0.42
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |   Match Lists     : 1.06
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |   DFA
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     1 byte states : 0.54
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     2 byte states : 17.70
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: |     4 byte states : 0.00
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: +----------------------------------------------------------------
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: [ Number of patterns truncated to 20 bytes: 913 ]
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: afpacket DAQ configured to inline.
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Acquiring network traffic from "eth0:eth2".
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Initializing daemon mode
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Daemon initialized, signaled parent pid: 1
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Reload thread starting...
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Reload thread started, thread 0xffe53af210 (9457)
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Checking PID path...
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: PID path stat checked out ok, PID path set to /var/snort/
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Writing PID "9381" to file "/var/snort//snort_eth0:eth2.pid"
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:         --== Initialization Complete ==--
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:    ,,_     -*> Snort! <*-
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:   o"  )~   Version 2.9.7.2 GRE (Build 177)
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:    ''''    By Martin Roesch & The Snort Team: http://www.snort.org/contact#team
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Copyright (C) 2014 Cisco and/or its affiliates. All rights reserved.
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Using libpcap version 1.5.3
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Using PCRE version: 8.36 2014-09-26
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Using ZLIB version: 1.2.8
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Rules Engine: SF_SNORT_DETECTION_ENGINE  Version 2.4  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_MODBUS  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_SIP  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_DNP3  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_SMTP  Version 1.1  <Build 9>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_DCERPC2  Version 1.0  <Build 3>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_GTP  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_SSH  Version 1.1  <Build 3>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_DNS  Version 1.1  <Build 4>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_REPUTATION  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_FTPTELNET  Version 1.2  <Build 13>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_SSLPP  Version 1.1  <Build 4>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_IMAP  Version 1.0  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_SDF  Version 1.1  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]:            Preprocessor Object: SF_POP  Version 1.0  <Build 1>
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Commencing packet processing (pid=9381)
Fri Jul 29 12:27:08 2016 daemon.notice snort[9381]: Decoding Ethernet
Fri Jul 29 12:29:58 2016 daemon.notice snort[9381]: S5: Session exceeded configured max bytes to queue 1090276 using 1090841 bytes (server queue). 66.234.209.81 60501 --> 216.38.158.170 8080 (0) : LWstate 0xf LWFlags 0x406007
Fri Jul 29 12:30:03 2016 daemon.notice snort[9381]: S5: Session exceeded configured max bytes to queue 1090276 using 1090335 bytes (server queue). 66.234.209.81 60502 --> 216.38.158.170 8080 (0) : LWstate 0xf LWFlags 0x406007
Fri Jul 29 12:30:56 2016 daemon.notice snort[9381]: S5: Session exceeded configured max bytes to queue 1090276 using 1091563 bytes (server queue). 66.234.209.81 60801 --> 216.38.158.170 8080 (0) : LWstate 0x9 LWFlags 0x406007
Fri Jul 29 12:31:08 2016 daemon.notice snort[9381]: S5: Session exceeded configured max bytes to queue 1090276 using 1090426 bytes (server queue). 66.234.209.81 60799 --> 216.38.158.170 8080 (0) : LWstate 0x9 LWFlags 0x6007
Fri Jul 29 12:45:05 2016 authpriv.info dropbear[5450]: Exit (root): Exited normally
Fri Jul 29 12:45:05 2016 authpriv.warn dropbear[5450]: Couldn't set SO_PRIORITY (Bad file descriptor)