|
||||||||
This would probably be a pretty certain method, but it would require me to physically transport my lazy ass to the m0n0wall and open it up and then walk back and... Out of the question. :D // Thomas Hertz > -----Original Message----- > From: Quark AV - Hilton Travis [mailto:Hilton at QuarkAV dot com] > Sent: den 8 juni 2004 00:06 > To: m0n0wall at lists dot m0n0 dot ch > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to m0n0wall > (wired) IPSec > > Hi Thomas, > > The easy way to check this is to remove the VPN card and benchmark 3DES > again. :) > > -- > > Regards, > > Hilton Travis Phone: +61-(0)7-3343-3889 > Manager, Mobile: +61 (0)419 792 394 > Quark IT http://www.QuarkIT.com.au/ > Quark AudioVisual http://www.QuarkAV.net/ > (Brisbane, Australia) > > Network Administration, SmoothWall Firewalls, NOD32 AntiVirus > Non Linear Video Editing Solutions & Digital Audio Workstations > Conference and Seminar AudioVisual Production and Recording > > War doesn't determine who is right. War determines who is left. > > > > -----Original Message----- > > From: Thomas Hertz [mailto:term at cynisk dot net] > > Sent: Tuesday, 8 June 2004 07:41 > > To: m0n0wall at lists dot m0n0 dot ch > > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to > > m0n0wall (wired) IPSec > > > > Hello James, Mitch et al. :) > > > > I haven't done anything to make my vpn1411 work, but to pop > > it right in. I do believe it's working, at least my > > benchmarking shows so. These are the benchmarks running ttcp > > on the m0n0wall box (a net4801). > > > > Using DES/MD5: > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > > -> 192.168.0.200 > > ttcp-t: socket > > ttcp-t: 16777216 bytes in 4.10 real seconds = 3999.29 KB/sec +++ > > ttcp-t: 2054 I/O calls, msec/call = 2.04, calls/sec = 501.38 > > ttcp-t: 0.0user 2.3sys 0:04real 59% 18i+250d 236maxrss 0+2pf 0+2059csw > > > > Using 3DES/MD5: > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > > -> 192.168.0.200 > > ttcp-t: socket > > ttcp-t: 16777216 bytes in 4.11 real seconds = 3982.17 KB/sec +++ > > ttcp-t: 2054 I/O calls, msec/call = 2.05, calls/sec = 499.23 > > ttcp-t: 0.0user 2.2sys 0:04real 55% 20i+266d 236maxrss 0+2pf 0+2054csw > > > > Using Blowfish/MD5: > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > > -> 192.168.0.200 > > ttcp-t: socket > > ttcp-t: 16777216 bytes in 9.26 real seconds = 1768.90 KB/sec +++ > > ttcp-t: 2054 I/O calls, msec/call = 4.62, calls/sec = 221.76 > > ttcp-t: 0.0user 8.7sys 0:09real 94% 16i+215d 236maxrss 0+2pf 0+148csw > > > > The only of these not supported by the vpn1411 is Blowfish, > > which usually is a lot faster than 3DES when using software > > encryption. I believe this shows that my card is indeed > > working as it should. Also, I don't believe the > > net4801 has enough juice in it to manage >30Mbps 3DES without > > HW crypto either. Here is what dmesg tells me in case someone > > is interested: > > > > hifn0 mem > > 0xa0008000-0xa000ffff,0xa0004000-0xa0005fff,0xa0003000-0xa0003fff > > irq 11 at device 14.0 on pci0 > > hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions > > > > Cheers, > > > > Thomas Hertz > > > > > > > -----Original Message----- > > > From: James Baber [mailto:origin at gmail dot com] > > > Sent: den 7 juni 2004 15:44 > > > To: Thomas Hertz > > > Subject: Re: [m0n0wall] More throughput testing - m0n0wall > > to m0n0wall > > > (wired) IPSec > > > > > > Hello Thomas, > > > > > > Can you tell me how you are getting the 1411 to work? I > > can't get any > > > of mine to work in the 4801. > > > > > > Thanks, > > > James > > > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |