Bittorrent On VM

[Impz2002]

Originally Posted by Jonathan90

no offence but amybe your ain't got it configured right or something mines fine when configured correctly oh and another thing huge swamped torrents can cause crap browsing try the openoffice torrent

Im not being funny mate but im not your average user. I am well aware of the nature of torrents and am well versed in the workings of TCP/IP stacks in windows and this isnt your average client setup issue. Something very strange is going on and as you can see from the posts on this thread there are a fair few technical bods looking into it without a confirmed idea of what it could be.

Thanks for the offer though its very community spirited of you

And just to allay your notion of the cause being Utorrent. I have used other clients and have the same issue. this issue also affects all 4 computers in my house some running XP pro and some running Vista home premium so it cannot be accounted to a particular system. Also my router is not the cause because as shown in the initial post in this thread the HTTP Requests are leaving the router and are getting lost somewhere after the UBR.

Impz

[Andrewcrawford23]

Originally Posted by Broadbandings

It's the summary from Wireshark / Ethereal and is the same format as a TCPdump.

You can't see at what point it's dropping from the trace as I've no visibility of anything past my network card. I can prove that my router had a NAT session set up, I can prove that there was no TCPIP.sys half open connections limit but I can't say for sure anything beyond that.

Do you happen to have anotehr computer that you can run a torrent from as seeder? i am jsut curious if it goes slow on the local network, if it doesnt it defentialy rules your comptuer out and it has to be from some point after it leave the mdoem.

Am i right in assuming the packet do come back? but jsut with very high dekay on them?

[Fatec]

Originally Posted by Impz2002

Im not being funny mate but im not your average user. I am well aware of the nature of torrents and am well versed in the workings of TCP/IP stacks in windows and this isnt your average client setup issue. Something very strange is going on and as you can see from the posts on this thread there are a fair few technical bods looking into it without a confirmed idea of what it could be.

Nothing strange going on, just ALLOT at work

[Ignitionnet]

Originally Posted by Andrewcrawford23

Do you happen to have anotehr computer that you can run a torrent from as seeder? i am jsut curious if it goes slow on the local network, if it doesnt it defentialy rules your comptuer out and it has to be from some point after it leave the mdoem.

Yes but it's not the torrent that's the issue, its' the HTTP stream I highlighted.

Am i right in assuming the packet do come back? but jsut with very high dekay on them?

Not quite, took 3 requests to get a single response and that response was late, the HTTP flow was broken.

---------- Post added at 17:21 ---------- Previous post was at 17:21 ----------

Originally Posted by TraxData2

Nothing strange going on, just ALLOT at work

Not easy to prove, but hey I'm bored.

[Andrewcrawford23]

Originally Posted by Broadbandings

Yes but it's not the torrent that's the issue, its' the HTTP stream I highlighted.



Not quite, took 3 requests to get a single response and that response was late, the HTTP flow was broken.

---------- Post added at 17:21 ---------- Previous post was at 17:21 ----------



Not easy to prove, but hey I'm bored.

The http stream is broken when torrent is on? but not when it is off? if so i agree this having nothing to do with yoru machine. but i am really confussed as to what would break a stream will need to check that to be sure. will need to speak witha few network people i know

---------- Post added at 17:33 ---------- Previous post was at 17:32 ----------

Originally Posted by TraxData2

Nothing strange going on, just ALLOT at work

Very hard to prove unfortnally until virgin deny it then one day after launch admit it

[Ignitionnet]

Lots of things can cause it but I'm interested in what.

[Andrewcrawford23]

Originally Posted by Broadbandings

Lots of things can cause it but I'm interested in what.

Not something i hav heard off but i am certainly interested so i am going to do some asking then i might be able to find out where it is breaking

[popper]

Originally Posted by Jonathan90

honestly you gotta get it in your head?

if utorrent is on it goes slow if not it doesn't so its obviously utorrent causing the problem wrong settings,network card can't handle the connections i don't know but isn't it obvious it utorrent or whatever client your using? try using less global connection put a lower number its not virginmedia for once imo some things wrong your end. or maybe as someone said above maybe your in a trial area i give up lol try a different client try halite (binarynotions.com)

good luck

NO YOU have to get it though/in YOUR head , on first reading it, and not taking into consideration anything thats been posted since, some people MIGHT assume its an Obvious thing.

however, even with the very limited and small Wireshark: http://www.wireshark.org/ trace the OP supplyed, it makes it clear theres something very odd going on.

then you have my post that states i personally tryed several torrent clients last night when i noticed the CF was acting up , there has been no posts regarding any CF problems that iv seen and so theres yet another fact to consider.

is it your contention that all the torrent clients az,utorrent, vuse(yes its az updated but on another LAN machine),and transmission as supplyed on the latest freeNAS liveCDs thats freeBSD based in case your interested BTW).

the only one i didnt get around to testing that i have right now was mldonkey (http://www.mldonkey.org)a multi-protocol P2P daemon, apparently you can manage it (including torrent-upload) using the multi-platform client Sancho (http://sancho-gui.sf.net).

were all configured wrong (and no i wasnt running them all at the same time )and so slowing down and dropping the http connections.

---------- Post added at 18:10 ---------- Previous post was at 18:02 ----------

Originally Posted by TraxData2

Nothing strange going on, just ALLOT at work

ohh the ALLOT of work thing ,time to make and keep these full wireshark dumps then for later use perhaps

[Andrewcrawford23]

Well the little research i have done suggest interceptions as one cause, unreachable host as another, and server not wanting to accept the packets very strange.... im getting more itnerested by the minute deep network stuff

[popper]

im currently running from a baguley/NW connected UBR BTW.

coincidence perhaps but you got to wonder

did anyone else see a large speed update in the webpage getting in the last 10 minutes?.

its been running like a slug on all page refreshes all day (not just here) and night since i ran those torrent tests, and the minute capturing raw wireshark logs and ALLOT comes up in the thread it suddenly vastly inproves, (its not STM and its not increased just before the hour as STM does here), you might think someone was reading the thread and just send the shutdown/reset commands to any test kit they might have in put place in some area's

[cook1984]

I too have noticed similar issues with VM, and although I don't know why it happens (cheap crappy equipment most likely, it seemed to start when they brought in the STM retarding so maybe it's to do with that equipment) but I do have a solution.

I use a pfSense based router with correctly configured traffic shaping. With it off I get the problems, with it on they go away. My theory is that pfSense evening out the transmission rate helps, where as an unshaped connection just dumps packets as fast as possible and causes VM's equipment to just randomly drop packets).

If you go this route remember to call retentions and get them to deduct a few quid a month to cover the running costs of your pfSense router, since they can't fix it for you.

[popper]

andrew you might be interested in this page
http://wiki.wireshark.org/FileFormatReference
it covers all the file formats you must be used to , i cant find anything missing there that wireshark cant take as its input.

"...
Capture File Format Reference


Wireshark supports a variety of capture file formats.
Some of these formats are well-documented and therefore well-known, like the libpcap / WinPcap format Wireshark uses natively.

Other formats are added to Wireshark by reverse engineering, so the support of these formats is done through "sophisticated guesswork". This is the reason why support of these file types might be incomplete and inaccurate at some parts.

• /libpcap captures (TcpDump, Wireshark native and various other tools that use LibPcap)
• snoop and atmsnoop captures
• Shomiti/Finisar Surveyor captures
• Novell LANalyzer captures
• Microsoft Network Monitor captures
• AIX's iptrace captures
• Cinco Networks NetXRay captures
• Network Associates Windows-based Sniffer captures
• Network General/Network Associates DOS-based Sniffer (compressed or uncompressed) captures
• AG Group/ WildPackets EtherPeek/TokenPeek/AiroPeek/EtherHelp/PacketGrabber captures
• RADCOM's WAN/LAN analyzer captures
• Network Instruments Observer version 9 captures
• Lucent/Ascend router debug output
• RedBack SE400/800 tcpdump pcap format
• HP-UX's nettl captures
• Toshiba's ISDN routers dump output
• the output from i4btrace from the ISDN4BSD project
• traces from the EyeSDN USB S0.
• the output in IPLog format from the Cisco Secure Intrusion Detection System
• pppd logs (pppdump format)
• the output from VMS's TCPIPtrace/TCPtrace/UCX$TRACE utilities
• the text output from the DBS Etherwatch VMS utility
• Visual Networks' Visual UpTime traffic capture
• the output from CoSine L2 debug
• the output from Accellent's 5Views LAN agents
• Endace Measurement Systems' ERF format captures
• Linux Bluez Bluetooth stack hcidump -w traces
• Tektronix K12/K15 captures
• ASCII trace output from the IBM iSeries (AS/400) Ethernet Communications Trace
• DCT2000 .out files
• The output from the Juniper NetScreen snoop command
• TamoSoft's CommView files

If you can't find the required file format on the list above, you may try ProConvert (closed source freeware, registration required, Win32 only), a tool to convert capture files between different formats. Their list of supported file formats differs from the Wireshark list above, so you might be able to convert your file to a format that Wireshark can read (e.g. libpcap).

..."

http://wiki.wireshark.org/BitTorrent...s%2Fbittorrent

http://wiki.wireshark.org/HTTP_Preferences

http://www.wireshark.org/

[Ignitionnet]

Originally Posted by popper

however, even with the very limited and small Wireshark: http://www.wireshark.org/ trace the OP supplyed, it makes it clear theres something very odd going on.

That was the entire flow popper, note the flags, it runs right from SYN to FIN,ACK as my web browser decided it couldn't be bothered to wait.

ohh the ALLOT of work thing ,time to make and keep these full wireshark dumps then for later use perhaps

We'll see what we can see.

[Andrewcrawford23]

Originally Posted by popper

andrew you might be interested in this page
http://wiki.wireshark.org/FileFormatReference
it covers all the file formats you must be used to , i cant find anything missing there that wireshark cant take as its input.

"...
Capture File Format Reference


Wireshark supports a variety of capture file formats.
Some of these formats are well-documented and therefore well-known, like the libpcap / WinPcap format Wireshark uses natively.

Other formats are added to Wireshark by reverse engineering, so the support of these formats is done through "sophisticated guesswork". This is the reason why support of these file types might be incomplete and inaccurate at some parts.

• /libpcap captures (TcpDump, Wireshark native and various other tools that use LibPcap)
• snoop and atmsnoop captures
• Shomiti/Finisar Surveyor captures
• Novell LANalyzer captures
• Microsoft Network Monitor captures
• AIX's iptrace captures
• Cinco Networks NetXRay captures
• Network Associates Windows-based Sniffer captures
• Network General/Network Associates DOS-based Sniffer (compressed or uncompressed) captures
• AG Group/ WildPackets EtherPeek/TokenPeek/AiroPeek/EtherHelp/PacketGrabber captures
• RADCOM's WAN/LAN analyzer captures
• Network Instruments Observer version 9 captures
• Lucent/Ascend router debug output
• RedBack SE400/800 tcpdump pcap format
• HP-UX's nettl captures
• Toshiba's ISDN routers dump output
• the output from i4btrace from the ISDN4BSD project
• traces from the EyeSDN USB S0.
• the output in IPLog format from the Cisco Secure Intrusion Detection System
• pppd logs (pppdump format)
• the output from VMS's TCPIPtrace/TCPtrace/UCX$TRACE utilities
• the text output from the DBS Etherwatch VMS utility
• Visual Networks' Visual UpTime traffic capture
• the output from CoSine L2 debug
• the output from Accellent's 5Views LAN agents
• Endace Measurement Systems' ERF format captures
• Linux Bluez Bluetooth stack hcidump -w traces
• Tektronix K12/K15 captures
• ASCII trace output from the IBM iSeries (AS/400) Ethernet Communications Trace
• DCT2000 .out files
• The output from the Juniper NetScreen snoop command
• TamoSoft's CommView files

If you can't find the required file format on the list above, you may try ProConvert (closed source freeware, registration required, Win32 only), a tool to convert capture files between different formats. Their list of supported file formats differs from the Wireshark list above, so you might be able to convert your file to a format that Wireshark can read (e.g. libpcap).

..."

http://wiki.wireshark.org/BitTorrent...s%2Fbittorrent

http://wiki.wireshark.org/HTTP_Preferences

http://www.wireshark.org/

i was about to ask if this wireshark was packet sniffer seems it is

Oh i forgot thanks for that i will be havinga good read of it its something that itnerests me, i normally use another sniffer