Posted by breda on Aug 05, 2016; 12:01am
URL: https://itus.accessinnov.com/Internet-speed-slower-in-bridge-mode-tp1123p1139.html

Hi,  user8446 thanks I updated the files but still the same speed  I will attached my Snort Config  and system logs

Thanks for all the help

logs

Snort_Config.txt

system_log.txt






I seen this in the IPS log

08/04-16:52:12.071792  [Drop] [**] [1:2402000:4156] ET DROP Dshield Block Listed Source group 1 [**] [Classification: Misc Attack] [Priority: 2] {TCP} 93.174.93.136:49243 -> 66.234.209.81:5050
08/04-16:57:28.610636  [Drop] [**] [1:2402000:4156] ET DROP Dshield Block Listed Source group 1 [**] [Classification: Misc Attack] [Priority: 2] {TCP} 183.60.48.25:12210 -> 66.234.209.81:3306

------------------------------------------------------------------------------------------------
with shield
Download Speed: 56801 kbps (7100.1 KB/sec transfer rate)
Upload Speed: 6146 kbps (768.3 KB/sec transfer rate)
Latency: 11 ms
Jitter: 8 ms

---------------------------------------------------------------------------------------
without Shield
Download Speed: 105786 kbps (13223.3 KB/sec transfer rate)
Upload Speed: 6248 kbps (781 KB/sec transfer rate)
Latency: 10 ms
Jitter: 4 ms

----------------------------------------------------------------------------------

I also see few erorrs in the log

Thu Aug  4 16:38:32 2016 authpriv.info dropbear[3230]: Early exit: Terminated by signal
Thu Aug  4 16:38:32 2016 authpriv.info dropbear[3228]: Early exit: Terminated by signal
Thu Aug  4 16:38:33 2016 authpriv.info dropbear[5256]: Not backgrounding
Thu Aug  4 16:38:33 2016 authpriv.info dropbear[5257]: Not backgrounding
Thu Aug  4 16:38:33 2016 authpriv.warn dropbear[5259]: Failed listening on '22': Error listening: Address already in use
Thu Aug  4 16:38:33 2016 authpriv.info dropbear[5259]: Early exit: No listening ports available.
Thu Aug  4 16:38:33 2016 authpriv.warn dropbear[5258]: Failed listening on '22': Error listening: Address already in use
Thu Aug  4 16:38:33 2016 authpriv.info dropbear[5258]: Early exit: No listening ports available.
Thu Aug  4 16:45:39 2016 daemon.emerg procd: 42584 85123.238  116403.0     55.9  416459729.3  29327.4         0
Thu Aug  4 16:45:39 2016 user.notice root: Successful NTP clock adjust (0.us.pool.ntp.org).
Thu Aug  4 16:45:39 2016 daemon.info procd: - init complete -
Thu Aug  4 16:47:51 2016 daemon.notice snort[5099]: S5: Session exceeded configured max bytes to queue 2097152 using 2098566 bytes (server queue). 66.234.209.81 61853 --> 69.42.31.34 8080 (0) : LWstate 0x9 LWFlags 0x6007
Thu Aug  4 16:47:51 2016 daemon.notice snort[5099]: S5: Session exceeded configured max bytes to queue 2097152 using 2098032 bytes (server queue). 66.234.209.81 61855 --> 69.42.31.34 8080 (0) : LWstate 0x9 LWFlags 0x6007

Thu Aug  4 16:48:58 2016 kern.info kernel: [  344.310022] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
---------------------------------------------------------------------------------------------------------------------------------------------------