![](https://infosec.pub/pictrs/image/b1dd63c7-b588-44d5-bb97-82278a31f513.png)
![](https://sh.itjust.works/pictrs/image/15634034-afae-4426-826f-0ba7e2d1adda.png)
Added the Update 2. Still some things to do, but we know a little bit more now. Feedback and questions are still welcome.
Added the Update 2. Still some things to do, but we know a little bit more now. Feedback and questions are still welcome.
Ping - Update 2 Your numbers are are still missing since I havent had time to look into the pcaps yet. I hope I can get it done by the end of the week, but we are a little bit wiser.
Ping - Update 2
Not yet. Just got access to the test clients and I have planned to do a troubleshooting session tomorrow in the morning. Not a big fan of stress testing the network on a working day haha
I’ll keep that in mind
Will compare it as soon as I get my hands on the machine.
And yeah, we do tend to block ICMP over here too.
Getting a pcap of another client could bring some insight, yeah.
SSH is used for the data transfer. Without knowing it at this moment, I’d assume scp or rsync. You mean whether all their internet traffic is routed through the active SSH session?
I haven’t had the chance to get a pcap yet. As soon as I get my fingers on the test clients, I’ll check them and additionally do testing with TCP and UDP transfers. I’ll let you know.
Just to clarify: this would be the limit for a single TCP connection and yes, could be the limit for this one download. This would not explain, why the rest of the location is affected if theoretically 90% of the bandwidth is still available, no? - Please correct me if I am wrong here.
Gotcha! - I thought Wireguard might has some logging features that could provide some insights. Thank you.
Good points! I’ll get access to test clients on both sites to do some testing. If I get the problem reproduced, I can take some packet captures without getting the client involved while monitoring the hardware. I’ll be smarter after that session.
Thank you!
Not yet. Wouldn’t expect it tbh, but you’ll never know. How would you utilize Wirehuard for it? I’d like to hear more about it.
Valid question. We’ve checked it multiple times, on the client and via monitoring that it is 10 Mbits. Thank you.
The ISPs are slow to answer if there is no active outage. Will take some time anyway.
Packets are dropped in bot directions. I am currently looking through the pcaps and will do another stress test later - got another window. MTU/MSS is the prio today.