@lordofpc734 said in NTOPNG Reports TCP Out Of Order packets for 3 clients (2 wireless, one wired):
im in a SNR war with my ISP. (means im getting really high noises and crap service)
That is a likely cause. A noisy line means lost packets and that in turn kills performance, as TCP will have to wait for retransmission of lost packets.
It's open source you can change anything you want.
There's no way to change that via the normal pfSense config though, you would need to edit the file that generates it.
Steve
It should show when it does renew at other times and you will see what the lease time your ISP gives you. pfSense will usually try to renew it at 50% of that time. If that's not happening it would be a problem.
Nope ntop doesn't block anything. Do you have Snort or Suricata installed? They are far more likely.
Or that could be a symptom of whatever is actually causing the problem, the laptop tries much harder to connect opening a lot of connections.
Steve
The USG appears to have a number of VPN options including OpenVPN so I would not expect any problem doing that.
The only issue might be the DynDNS setup and whether you can use an FQDN rather than an IP as the server but it seems unlikely that would not be allowed.
Steve
Yup. You should set a source IP (and an alias of IPs) to allow access from. Use a dyndns client if you don't know where you will be connecting from.
Steve
We don't include all of the necessary components for at to fully function out of the box.
The binaries are there, but notably the cron job is not present. I can't remember what else might be missing, though.
You could install the Cron package and then add an entry for this:
*/5 * * * * root /usr/libexec/atrun
Yes it can, that's a very common configuration.
You should run the current version, 2.4.4p3, unless you have a very good reason not to.
That should not cause a problem with this though.
Steve
Wanting to use all of rfc1918 space because its available is not a good reason ;) for example..
I would really like to understand how you came to use /19 - is that your favorite number or something?
Ok, if you only have a firewall rule with the OpenVPN gateway set it will force all traffic out that way which will break connectivity to the LAN.
Add a rule on the new interface above any rules with a gateway set to pass ping traffic to the LAN.
Otherwise check the firewall logs. Check the state table while you're pinging.
Steve
You can also provide the timezone to DHCP clients, my Linksys switch (LGS318) uses it.
Just add these 2 DHCP options to your DHCP server :
option 100 : "CET-1CET-2,M3.5.0,M10.5.0/3"
option 101 : "Europe/Paris"
