Clavister S-series SX40 problem: SLOW

Security Gateway Discussions
Post Reply
GMaster
Posts: 5
Joined: 15 Dec 2009, 10:53
Location: Switzerland

Clavister S-series SX40 problem: SLOW

Post by GMaster » 15 Dec 2009, 11:25

hi guys,
we have a problem here with our Clavister S-series SX40. data flow is slow as hell. we get like 100 kbyte/second for each machine..
my boss expect an internal memory problem within the Clavister Firewall.

everything looks normal.
console says:
100megabyte of 112 megabyte free ram
CPU usage: 2%
150 rules created

we can not identify when the problem occured, but it seems it was without a change in rule/firewall settings.

any help is appreciated.
Can't stop here, this is bat country!

heol
Posts: 30
Joined: 22 Apr 2008, 08:11
Location: Clavister HQ - Örnsköldsvik

Re: Clavister S-series SX40 problem: SLOW

Post by heol » 15 Dec 2009, 14:04

Hi GMaster,

I would recommend you to contact the Clavister technical support as this seems to be either a hardware or software defect. Without more information it is hard to speculate in the cause of the problems and solutions to it.

How old is the SX40 and what CorePlus version are you running?

Best Regards,

Henrik

mattias
Beta Tester
Posts: 28
Joined: 14 Apr 2008, 21:34
Location: Örnsköldsvik
Contact:

Re: Clavister S-series SX40 problem: SLOW

Post by mattias » 15 Dec 2009, 14:19

Sounds like it could be a duplex problem of one of the interfaces, check interface status if "ifstat ifacename"

GMaster
Posts: 5
Joined: 15 Dec 2009, 10:53
Location: Switzerland

Re: Clavister S-series SX40 problem: SLOW

Post by GMaster » 15 Dec 2009, 15:13

hi Hendrik,

after getting in touch with them, they reffered the SX40 to a model series called SG203. it must be about 2002 that my company purchased them.

this is what I got from the console:

Clavister Firewall 8.40.04V
Copyright Clavister 1996-2004. All rights reserved
SSH IPSEC Express SSHIPM version 5.1.1 library 5.1.1
Copyright 1997-2003 SSH Communications Security Corp.
Build : Oct 6 2004


cheers
G
Can't stop here, this is bat country!

GMaster
Posts: 5
Joined: 15 Dec 2009, 10:53
Location: Switzerland

Re: Clavister S-series SX40 problem: SLOW

Post by GMaster » 15 Dec 2009, 15:33

mattias wrote:Sounds like it could be a duplex problem of one of the interfaces, check interface status if "ifstat ifacename"
this is what we get for all interfaces (xxx for the IP adress..)

Cmd> ifstat
Interfaces:
core IPAddr 127.0.0.1 HwAddr 0000:0000:0000
Null (sink)
int IPAddr 10.0.0.250 HwAddr 000d:481f:0942
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 9 IRQ 7
dmz IPAddr 10.0.1.250 HwAddr 000d:481f:0943
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 10 IRQ 5
ext IPAddr xxxx HwAddr xxxx
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 12 IRQ 11

Do 'ifstat <iface name>' to see details
Cmd> ifstat int
Iface int - Internes Netzwerk
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 9 IRQ 7
Media : "100BaseTx"
Speed : 100 Mbps Full Duplex
MTU : 1500
IP Address : 10.0.0.250
Hw Address : 000d:481f:0942

Software Statistics:
Soft received :298621556 Soft sent :395431683 Send failures : 0
Dropped : 204565 IP Input Errs : 0

Driver information / hardware statistics:
IN : packets=298621603 bytes=3742395937 errors= 3476121 dropped= 0
OUT: packets=395459815 bytes=1471764260 errors= 0 dropped= 0
Collisions : 0
In : Length Errors : 3476121
In : Overruns : 0
In : CRC Errors : 0
In : Frame Errors : 0
In : FIFO Overruns : 218031
In : Packets Missed : 0
Out: Sends Aborted : 0
Out: Carrier Errors : 0
Out: FIFO Underruns : 0
Out: SQE Errors : 0
Out: Late Collisions : 0
Cmd> ifstat dmz
Iface dmz - Server Netzwerk
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 10 IRQ 5
Media : "100BaseTx"
Speed : 100 Mbps Full Duplex
MTU : 1500
IP Address : 10.0.1.250
Hw Address : 000d:481f:0943

Software Statistics:
Soft received :412383868 Soft sent :309149253 Send failures : 0
Dropped : 663139 IP Input Errs : 0

Driver information / hardware statistics:
IN : packets=412383820 bytes=480509297 errors= 0 dropped= 0
OUT: packets=309187259 bytes=2400513909 errors= 0 dropped= 0
Collisions : 0
In : Length Errors : 0
In : Overruns : 0
In : CRC Errors : 0
In : Frame Errors : 0
In : FIFO Overruns : 482618
In : Packets Missed : 0
Out: Sends Aborted : 0
Out: Carrier Errors : 0
Out: FIFO Underruns : 1
Out: SQE Errors : 0
Out: Late Collisions : 0
Cmd> ifstat ext
Iface ext - Extern
Builtin e100 - Intel(R) 8255x-based Ethernet Adapter Bus 0 Slot 12 IRQ 11
Media : "100BaseTx"
Speed : 100 Mbps Full Duplex
MTU : 1500
IP Address : xxx
Hw Address : xxx

Software Statistics:
Soft received :71102570 Soft sent :75015344 Send failures : 0
Dropped : 1254042 IP Input Errs : 0

Driver information / hardware statistics:
IN : packets=71102506 bytes=439182236 errors= 0 dropped= 0
OUT: packets=75022021 bytes=571697206 errors= 0 dropped= 0
Collisions : 0
In : Length Errors : 0
In : Overruns : 0
In : CRC Errors : 0
In : Frame Errors : 0
In : FIFO Overruns : 207
In : Packets Missed : 0
Out: Sends Aborted : 0
Out: Carrier Errors : 0
Out: FIFO Underruns : 2
Out: SQE Errors : 0
Out: Late Collisions : 0
Can't stop here, this is bat country!

GMaster
Posts: 5
Joined: 15 Dec 2009, 10:53
Location: Switzerland

Re: Clavister S-series SX40 problem: SLOW

Post by GMaster » 16 Dec 2009, 07:12

any ideas are welcome :)
Can't stop here, this is bat country!

danilovav
Posts: 181
Joined: 10 May 2009, 08:16
Location: Moscow, Russia
Contact:

Re: Clavister S-series SX40 problem: SLOW

Post by danilovav » 16 Dec 2009, 15:27

Try to use simple not managed switch between Clavister and ISP. Sometimes it solves problems like your.
BR, Alexandr Danilov

GMaster
Posts: 5
Joined: 15 Dec 2009, 10:53
Location: Switzerland

Re: Clavister S-series SX40 problem: SLOW

Post by GMaster » 17 Dec 2009, 11:03

danilovav wrote:Try to use simple not managed switch between Clavister and ISP. Sometimes it solves problems like your.
where can I change this?
Can't stop here, this is bat country!

danilovav
Posts: 181
Joined: 10 May 2009, 08:16
Location: Moscow, Russia
Contact:

Re: Clavister S-series SX40 problem: SLOW

Post by danilovav » 17 Dec 2009, 13:27

Try to connect Clavister's WAN interface and ISP cable to switch without other connections.
BR, Alexandr Danilov

Post Reply