This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

high ping times, astaro becomes unresponsive

markp1989 over 14 years ago

been using astaro for about 2 weeks.

so far its happened 3 or 4 times, will be using the internet, and pages will stop loading, and the webui of astaro fails to load.

This lasts about 2 minutes then the internet starts working again.

I tried pinging my astaro box (192.168.1.1), the last time this happened, you can see that the ping time was pretty bad then started to clear up.


mark@mark-desktop:~$ ping 192.168.1.1
PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_req=1 ttl=64 time=27110 ms
64 bytes from 192.168.1.1: icmp_req=2 ttl=64 time=26134 ms
64 bytes from 192.168.1.1: icmp_req=3 ttl=64 time=25148 ms
64 bytes from 192.168.1.1: icmp_req=4 ttl=64 time=25288 ms
64 bytes from 192.168.1.1: icmp_req=5 ttl=64 time=24474 ms
64 bytes from 192.168.1.1: icmp_req=6 ttl=64 time=23515 ms
64 bytes from 192.168.1.1: icmp_req=7 ttl=64 time=22560 ms
64 bytes from 192.168.1.1: icmp_req=8 ttl=64 time=22669 ms
64 bytes from 192.168.1.1: icmp_req=9 ttl=64 time=23068 ms
64 bytes from 192.168.1.1: icmp_req=10 ttl=64 time=22262 ms
64 bytes from 192.168.1.1: icmp_req=11 ttl=64 time=21608 ms
64 bytes from 192.168.1.1: icmp_req=12 ttl=64 time=21624 ms
64 bytes from 192.168.1.1: icmp_req=13 ttl=64 time=20836 ms
64 bytes from 192.168.1.1: icmp_req=14 ttl=64 time=20349 ms
64 bytes from 192.168.1.1: icmp_req=15 ttl=64 time=22540 ms
64 bytes from 192.168.1.1: icmp_req=16 ttl=64 time=23129 ms
64 bytes from 192.168.1.1: icmp_req=17 ttl=64 time=24610 ms
64 bytes from 192.168.1.1: icmp_req=18 ttl=64 time=24441 ms
64 bytes from 192.168.1.1: icmp_req=19 ttl=64 time=23583 ms
64 bytes from 192.168.1.1: icmp_req=20 ttl=64 time=23806 ms
64 bytes from 192.168.1.1: icmp_req=21 ttl=64 time=25584 ms
64 bytes from 192.168.1.1: icmp_req=22 ttl=64 time=24587 ms
64 bytes from 192.168.1.1: icmp_req=23 ttl=64 time=23580 ms
64 bytes from 192.168.1.1: icmp_req=24 ttl=64 time=22573 ms
64 bytes from 192.168.1.1: icmp_req=25 ttl=64 time=21576 ms
64 bytes from 192.168.1.1: icmp_req=26 ttl=64 time=20578 ms
64 bytes from 192.168.1.1: icmp_req=27 ttl=64 time=19578 ms
64 bytes from 192.168.1.1: icmp_req=28 ttl=64 time=18705 ms
64 bytes from 192.168.1.1: icmp_req=29 ttl=64 time=18224 ms
64 bytes from 192.168.1.1: icmp_req=30 ttl=64 time=17377 ms
64 bytes from 192.168.1.1: icmp_req=31 ttl=64 time=16405 ms
64 bytes from 192.168.1.1: icmp_req=32 ttl=64 time=15410 ms
64 bytes from 192.168.1.1: icmp_req=33 ttl=64 time=14463 ms
64 bytes from 192.168.1.1: icmp_req=34 ttl=64 time=13791 ms
64 bytes from 192.168.1.1: icmp_req=35 ttl=64 time=13377 ms
64 bytes from 192.168.1.1: icmp_req=36 ttl=64 time=12396 ms
64 bytes from 192.168.1.1: icmp_req=37 ttl=64 time=11415 ms
64 bytes from 192.168.1.1: icmp_req=38 ttl=64 time=10426 ms
64 bytes from 192.168.1.1: icmp_req=39 ttl=64 time=9573 ms
64 bytes from 192.168.1.1: icmp_req=40 ttl=64 time=9797 ms
64 bytes from 192.168.1.1: icmp_req=41 ttl=64 time=9004 ms
64 bytes from 192.168.1.1: icmp_req=42 ttl=64 time=8220 ms
64 bytes from 192.168.1.1: icmp_req=43 ttl=64 time=7760 ms
64 bytes from 192.168.1.1: icmp_req=44 ttl=64 time=6905 ms
64 bytes from 192.168.1.1: icmp_req=45 ttl=64 time=6301 ms
64 bytes from 192.168.1.1: icmp_req=46 ttl=64 time=5514 ms
64 bytes from 192.168.1.1: icmp_req=47 ttl=64 time=5442 ms
64 bytes from 192.168.1.1: icmp_req=48 ttl=64 time=4502 ms
64 bytes from 192.168.1.1: icmp_req=49 ttl=64 time=5057 ms
64 bytes from 192.168.1.1: icmp_req=50 ttl=64 time=4054 ms
64 bytes from 192.168.1.1: icmp_req=51 ttl=64 time=3440 ms
64 bytes from 192.168.1.1: icmp_req=52 ttl=64 time=3665 ms
64 bytes from 192.168.1.1: icmp_req=53 ttl=64 time=2713 ms
64 bytes from 192.168.1.1: icmp_req=54 ttl=64 time=1712 ms
64 bytes from 192.168.1.1: icmp_req=55 ttl=64 time=717 ms
64 bytes from 192.168.1.1: icmp_req=56 ttl=64 time=1280 ms
64 bytes from 192.168.1.1: icmp_req=57 ttl=64 time=1808 ms
64 bytes from 192.168.1.1: icmp_req=58 ttl=64 time=1813 ms
64 bytes from 192.168.1.1: icmp_req=59 ttl=64 time=1251 ms
64 bytes from 192.168.1.1: icmp_req=60 ttl=64 time=1870 ms
64 bytes from 192.168.1.1: icmp_req=61 ttl=64 time=3474 ms
64 bytes from 192.168.1.1: icmp_req=62 ttl=64 time=3964 ms
64 bytes from 192.168.1.1: icmp_req=63 ttl=64 time=3299 ms
64 bytes from 192.168.1.1: icmp_req=64 ttl=64 time=3325 ms
64 bytes from 192.168.1.1: icmp_req=65 ttl=64 time=2829 ms
64 bytes from 192.168.1.1: icmp_req=66 ttl=64 time=2592 ms
64 bytes from 192.168.1.1: icmp_req=67 ttl=64 time=2055 ms
64 bytes from 192.168.1.1: icmp_req=68 ttl=64 time=1439 ms
64 bytes from 192.168.1.1: icmp_req=69 ttl=64 time=581 ms
64 bytes from 192.168.1.1: icmp_req=70 ttl=64 time=1376 ms
64 bytes from 192.168.1.1: icmp_req=71 ttl=64 time=1345 ms
64 bytes from 192.168.1.1: icmp_req=72 ttl=64 time=648 ms
64 bytes from 192.168.1.1: icmp_req=73 ttl=64 time=409 ms
64 bytes from 192.168.1.1: icmp_req=74 ttl=64 time=980 ms
64 bytes from 192.168.1.1: icmp_req=75 ttl=64 time=675 ms
64 bytes from 192.168.1.1: icmp_req=76 ttl=64 time=263 ms
64 bytes from 192.168.1.1: icmp_req=77 ttl=64 time=441 ms
64 bytes from 192.168.1.1: icmp_req=78 ttl=64 time=489 ms
64 bytes from 192.168.1.1: icmp_req=79 ttl=64 time=414 ms
64 bytes from 192.168.1.1: icmp_req=80 ttl=64 time=330 ms
64 bytes from 192.168.1.1: icmp_req=81 ttl=64 time=53.1 ms
64 bytes from 192.168.1.1: icmp_req=82 ttl=64 time=13.5 ms
64 bytes from 192.168.1.1: icmp_req=83 ttl=64 time=0.680 ms
64 bytes from 192.168.1.1: icmp_req=84 ttl=64 time=5.45 ms
^C
--- 192.168.1.1 ping statistics ---
84 packets transmitted, 84 received, 0% packet loss, time 83091ms
rtt min/avg/max/mdev = 0.680/10978.993/27110.385/9581.161 ms, pipe 28
mark@mark-desktop:~$

specs of the machine:

2.66Ghz Celeron
40GB hard drive
256mb Memory
WAN - Intel Corporation 82562EZ 10/100 Ethernet Controller (Onboard network card)
LAN - Davicom Semiconductor, Inc. 21x4x DEC-Tulip compatible 10/100 Ethernet (pci network card)

serves:
4 dekstops
3 laptops
3 smart phones
1 xbox 360

Im thinking it may be the LAN network card as i had not heard of the make, I have a new card on the way. Linksys 10/100 etherfast pci adapters , I ordered 2.

What would be better use one linksys pci card and the onboard network or to use both the linksys pci cards?

have any one else experienced this problem ? or know what it could be?

Thanks for looking, Mark

This thread was automatically locked due to age.

0 markp1989 over 14 years ago

it just happened again [:(]


mark@mark-desktop:~$ ping 192.168.1.1

PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.

64 bytes from 192.168.1.1: icmp_req=1 ttl=64 time=40794 ms

64 bytes from 192.168.1.1: icmp_req=2 ttl=64 time=39862 ms

64 bytes from 192.168.1.1: icmp_req=3 ttl=64 time=38858 ms

64 bytes from 192.168.1.1: icmp_req=4 ttl=64 time=37891 ms

64 bytes from 192.168.1.1: icmp_req=5 ttl=64 time=36900 ms

64 bytes from 192.168.1.1: icmp_req=6 ttl=64 time=36191 ms

64 bytes from 192.168.1.1: icmp_req=7 ttl=64 time=35571 ms

64 bytes from 192.168.1.1: icmp_req=8 ttl=64 time=34831 ms

64 bytes from 192.168.1.1: icmp_req=9 ttl=64 time=34070 ms

64 bytes from 192.168.1.1: icmp_req=10 ttl=64 time=33066 ms

64 bytes from 192.168.1.1: icmp_req=11 ttl=64 time=32184 ms

64 bytes from 192.168.1.1: icmp_req=12 ttl=64 time=31271 ms

64 bytes from 192.168.1.1: icmp_req=13 ttl=64 time=30289 ms

64 bytes from 192.168.1.1: icmp_req=14 ttl=64 time=29366 ms

64 bytes from 192.168.1.1: icmp_req=15 ttl=64 time=28782 ms

64 bytes from 192.168.1.1: icmp_req=16 ttl=64 time=27811 ms

64 bytes from 192.168.1.1: icmp_req=17 ttl=64 time=26803 ms

64 bytes from 192.168.1.1: icmp_req=18 ttl=64 time=26060 ms

64 bytes from 192.168.1.1: icmp_req=19 ttl=64 time=25253 ms

64 bytes from 192.168.1.1: icmp_req=20 ttl=64 time=24278 ms

64 bytes from 192.168.1.1: icmp_req=21 ttl=64 time=23436 ms

64 bytes from 192.168.1.1: icmp_req=22 ttl=64 time=22936 ms

64 bytes from 192.168.1.1: icmp_req=23 ttl=64 time=22021 ms

64 bytes from 192.168.1.1: icmp_req=24 ttl=64 time=21545 ms

64 bytes from 192.168.1.1: icmp_req=25 ttl=64 time=20691 ms

64 bytes from 192.168.1.1: icmp_req=26 ttl=64 time=19716 ms

64 bytes from 192.168.1.1: icmp_req=27 ttl=64 time=19369 ms

64 bytes from 192.168.1.1: icmp_req=28 ttl=64 time=18390 ms

64 bytes from 192.168.1.1: icmp_req=29 ttl=64 time=17455 ms

64 bytes from 192.168.1.1: icmp_req=30 ttl=64 time=16631 ms

64 bytes from 192.168.1.1: icmp_req=31 ttl=64 time=15653 ms

64 bytes from 192.168.1.1: icmp_req=32 ttl=64 time=14703 ms

64 bytes from 192.168.1.1: icmp_req=33 ttl=64 time=13867 ms

64 bytes from 192.168.1.1: icmp_req=34 ttl=64 time=12898 ms

64 bytes from 192.168.1.1: icmp_req=35 ttl=64 time=11985 ms

64 bytes from 192.168.1.1: icmp_req=36 ttl=64 time=11313 ms

64 bytes from 192.168.1.1: icmp_req=37 ttl=64 time=10353 ms

64 bytes from 192.168.1.1: icmp_req=38 ttl=64 time=9570 ms

64 bytes from 192.168.1.1: icmp_req=39 ttl=64 time=8577 ms

64 bytes from 192.168.1.1: icmp_req=40 ttl=64 time=8278 ms

64 bytes from 192.168.1.1: icmp_req=41 ttl=64 time=7281 ms

64 bytes from 192.168.1.1: icmp_req=42 ttl=64 time=6284 ms

64 bytes from 192.168.1.1: icmp_req=43 ttl=64 time=5391 ms

64 bytes from 192.168.1.1: icmp_req=44 ttl=64 time=5302 ms

64 bytes from 192.168.1.1: icmp_req=45 ttl=64 time=4305 ms

64 bytes from 192.168.1.1: icmp_req=46 ttl=64 time=3307 ms

64 bytes from 192.168.1.1: icmp_req=47 ttl=64 time=2470 ms

64 bytes from 192.168.1.1: icmp_req=48 ttl=64 time=1564 ms

64 bytes from 192.168.1.1: icmp_req=49 ttl=64 time=1932 ms

64 bytes from 192.168.1.1: icmp_req=50 ttl=64 time=1713 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=51 ttl=64 time=1082 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=52 ttl=64 time=270 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=53 ttl=64 time=368 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=54 ttl=64 time=422 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=55 ttl=64 time=271 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=56 ttl=64 time=535 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=57 ttl=64 time=802 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=58 ttl=64 time=733 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=59 ttl=64 time=866 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=60 ttl=64 time=0.737 ms                                                                                                                                     

64 bytes from 192.168.1.1: icmp_req=61 ttl=64 time=941 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=62 ttl=64 time=521 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=63 ttl=64 time=1703 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=64 ttl=64 time=1464 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=65 ttl=64 time=1580 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=66 ttl=64 time=1024 ms                                                                                                                                      

64 bytes from 192.168.1.1: icmp_req=67 ttl=64 time=476 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=68 ttl=64 time=525 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=69 ttl=64 time=540 ms                                                                                                                                       

64 bytes from 192.168.1.1: icmp_req=70 ttl=64 time=701 ms

64 bytes from 192.168.1.1: icmp_req=71 ttl=64 time=340 ms

64 bytes from 192.168.1.1: icmp_req=72 ttl=64 time=500 ms

64 bytes from 192.168.1.1: icmp_req=73 ttl=64 time=261 ms

64 bytes from 192.168.1.1: icmp_req=74 ttl=64 time=147 ms

64 bytes from 192.168.1.1: icmp_req=75 ttl=64 time=0.696 ms

^C

--- 192.168.1.1 ping statistics ---

75 packets transmitted, 75 received, 0% packet loss, time 74103ms

rtt min/avg/max/mdev = 0.696/13669.015/40794.877/13360.907 ms, pipe 41

mark@mark-desktop:~$

0 William Warren over 14 years ago

256 megs of memory? you need absolutely a minimum of 1 gig. However you really should put 2 gigs into the box.

here's the min from astaro itself:
Minimum Hardware Requirements:

1.5+ GHz processor
1 GB RAM
20 GB hard disk
Bootable CD-ROM
2 or more network cards
Best performance results are experienced when using hardware specifications at or beyond: Intel Dual/Quad-Core CPUs >2GHz, 2GB RAM.

http://www.astaro.com/en-us/products/astaro-security-gateway-software-appliance

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 markp1989 over 14 years ago in reply to William Warren

Thanks for the reply, gonna look to see if i can get some ddr1 memory for it.

looking at the logs, around the time of the slowdowns memory usage was at ~90% and swap usage was at about ~40% so it definitely needs more.

during the last slow down, I sshed in to the machine and ran top, showed Snort_inline was using 95% of the cpu

just attached a screen shot of the hardware reporting page, on the memory usage you can see where I rebooted the machine
- snapshot2.png
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 14 years ago

everything depends on cpu and ram. your cpu is fine(look at the top machine in my sig..that's my home machine). Get some ram(2 gigs is really the recommended amount) and see what happens..[:)] if you still see high cpu then something is triggering the ips..that's a separate issue. first you need to address the ram..that will solve most if not all of your performance problems.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 markp1989 over 14 years ago in reply to William Warren

everything depends on cpu and ram.  your cpu is fine(look at the top machine in my sig..that's my home machine).  Get some ram(2 gigs is really the recommended amount) and see what happens..[:)] if you still see high cpu then something is triggering the ips..that's a separate issue.  first you need to address the ram..that will solve most if not all of your performance problems.

thanks, I looked at the price of ddr memory,  because its old its gotten expensive.  , 2gb would cost roughly £50 , the pc im using for astaro only cost me £5
http://www.ebuyer.com/product/63128

i'm starting to think I might be better to set up a system similar to this post:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/p/27893/84635#84635  , as I can get the atom motherboard he listed for ~£50 , and borrow 2gb ddr2 memory from another build
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 14 years ago

that'll work..[:)]

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 markp1989 over 14 years ago in reply to William Warren

In the end, I replaced both NIC's on my box, which seemed to stop the slow downs from happening.

I also upgraded the memory form 256m to 2gb as you suggested to avoid any future problems.

i managed to get 2*1gb sticks for £27 shipped
Cancel
Vote Up 0 Vote Down

Cancel
0 markp1989 over 14 years ago in reply to markp1989

the memory arrived and was installed today, working fine [:)]

since the memory upgrade the webui is a lot more responsive, and I haven't seen any slow downs.

Thank you for your help.
Cancel
Vote Up 0 Vote Down

Cancel