Posted by
breda on
Aug 05, 2016; 12:01am
URL: https://itus.accessinnov.com/Internet-speed-slower-in-bridge-mode-tp1123p1139.html
Hi, user8446 thanks I updated the files but still the same speed I will attached my Snort Config and system logs
Thanks for all the help
logs
Snort_Config.txt
system_log.txtI seen this in the IPS log
08/04-16:52:12.071792 [Drop] [**] [1:2402000:4156] ET DROP Dshield Block Listed Source group 1 [**] [Classification: Misc Attack] [Priority: 2] {TCP} 93.174.93.136:49243 -> 66.234.209.81:5050
08/04-16:57:28.610636 [Drop] [**] [1:2402000:4156] ET DROP Dshield Block Listed Source group 1 [**] [Classification: Misc Attack] [Priority: 2] {TCP} 183.60.48.25:12210 -> 66.234.209.81:3306
------------------------------------------------------------------------------------------------
with shield
Download Speed: 56801 kbps (7100.1 KB/sec transfer rate)
Upload Speed: 6146 kbps (768.3 KB/sec transfer rate)
Latency: 11 ms
Jitter: 8 ms
---------------------------------------------------------------------------------------
without Shield
Download Speed: 105786 kbps (13223.3 KB/sec transfer rate)
Upload Speed: 6248 kbps (781 KB/sec transfer rate)
Latency: 10 ms
Jitter: 4 ms
----------------------------------------------------------------------------------
I also see few erorrs in the log
Thu Aug 4 16:38:32 2016 authpriv.info dropbear[3230]: Early exit: Terminated by signal
Thu Aug 4 16:38:32 2016 authpriv.info dropbear[3228]: Early exit: Terminated by signal
Thu Aug 4 16:38:33 2016 authpriv.info dropbear[5256]: Not backgrounding
Thu Aug 4 16:38:33 2016 authpriv.info dropbear[5257]: Not backgrounding
Thu Aug 4 16:38:33 2016 authpriv.warn dropbear[5259]: Failed listening on '22': Error listening: Address already in use
Thu Aug 4 16:38:33 2016 authpriv.info dropbear[5259]: Early exit: No listening ports available.
Thu Aug 4 16:38:33 2016 authpriv.warn dropbear[5258]: Failed listening on '22': Error listening: Address already in use
Thu Aug 4 16:38:33 2016 authpriv.info dropbear[5258]: Early exit: No listening ports available.
Thu Aug 4 16:45:39 2016 daemon.emerg procd: 42584 85123.238 116403.0 55.9 416459729.3 29327.4 0
Thu Aug 4 16:45:39 2016 user.notice root: Successful NTP clock adjust (0.us.pool.ntp.org).
Thu Aug 4 16:45:39 2016 daemon.info procd: - init complete -
Thu Aug 4 16:47:51 2016 daemon.notice snort[5099]: S5: Session exceeded configured max bytes to queue 2097152 using 2098566 bytes (server queue). 66.234.209.81 61853 --> 69.42.31.34 8080 (0) : LWstate 0x9 LWFlags 0x6007
Thu Aug 4 16:47:51 2016 daemon.notice snort[5099]: S5: Session exceeded configured max bytes to queue 2097152 using 2098032 bytes (server queue). 66.234.209.81 61855 --> 69.42.31.34 8080 (0) : LWstate 0x9 LWFlags 0x6007
Thu Aug 4 16:48:58 2016 kern.info kernel: [ 344.310022] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
---------------------------------------------------------------------------------------------------------------------------------------------------