Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 27 subscribers
  • Views 1322 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Any way to tell if/when Traffic Shaping is working?

Wayne Folta

I've finally gotten around to trying traffic shaping for applications. (I've previously done shaping for firewall rules, to prioritize a VOIP subnet.) One big question: how do I know my application-based (or really any) traffic shaping configuration is actually doing something?

For example, I believe I've reserved bandwidth for Teams and Zoom calls, but how do I know when it's working? What if Sophos Applications classification gets Teams wrong, or what if I accidentally adjust shaping for Glip and not Ring Central, or what if I adjust shaping for Ring Central's video but not for its VOIP (I use the latter, not the former)?

I haven't found anything in the GUI, though I do have to say that the traffic shaping is a bit disjoint in the GUI. There might be a CLI command, and at a minimum all I need is to be able to run something while a Zoom video call or a Ring Central VOIP call is running to make sure there actually is reserved bandwidth for Zoom.

(To be honest, an overall buffer/queue throughput/backup kind of command or display might be pretty cool. I assume I could pull my specific question from that.)



This thread was automatically locked due to age.

Top Replies

  • +2 verified

    Hello Wayne,

    Thank you for contacting the Sophos Community.

    You would need to run a conntrack - E | grep

    Then you can see in the following 3 flags:

    bwid=20 upclass=2:9 dnclass=2:9

    bwid = 0 means no traffic shaping policy has been applied

    bwid = 20 means that traffic shaping police 20 has been applied

    Run the following command to know the BW policy ID 20

    psql -U nobody -d corporate -c "select * from tblbandwidthpolicy where policyid=20;"

    The easy would be to run this conntrack:

    conntrack -L | grep "bwid=0" | grep

    Just add the IP after the last GREP for the IP you want to know

    Regards,

    Jump to answer
Parents Reply Children
No Data