SG Broadband Community

Dear All,

I did an NDT, as per advice from Togers (thank you again!) my Provider Orange advertisers 20 Mb/s (20,000 Kb/s), my modem settings show 19304 Kb Downstream and 1016 Kb Upstream. However my SG Speed test shows an average of only 10,000 kb/s.

Results below confirm "Other network traffic is congesting the link". I am using Comodo and NOD32 as antivirus, Spywareblaster, Spybot, Adaware, TCP Optimizer (latest Results below from TCPAnalyser).

I have suspected for a long time that the system may be suffering in some way or another; any help would be greatly appreciated.

NDT -Results
TCP/Web100 Network Diagnostic Tool v5.4.12
click START to begin
Connected to: nitro.ucsc.edu -- Using IPv4 address
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
checking for firewalls . . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client-to-server [C2S]) . . . . . 482.0kb/s
running 10s inbound test (server-to-client [S2C]) . . . . . . 5.60Mb/s
Your PC is connected to a DSL modem
Information: Other network traffic is congesting the link

« SpeedGuide.net TCP Analyzer Results »
Tested on: 10.09.2007 18:52
IP address:

TCP options string: 020405ac0103030301010402
MSS: 1452
MTU: 1492
TCP Window: 511104 (multiple of MSS)
RWIN Scaling: 3
Unscaled RWIN : 63888
Reccomended RWINs: 63888, 127776, 255552, 511104
BDP limit (200ms): 20444kbps (2556KBytes/s)
BDP limit (500ms): 8178kbps (1022KBytes/s)
MTU Discovery: ON
TTL: 39
Timestamps: OFF
SACKs: ON
IP ToS: 00000000 (0)

I would appreciate any help what so ever!!

Thank you again,

Best Regards,

Contact.

SG Security Scan
Scanning
All 197 scanned ports on .... are filtered (141) or open|filtered (56)
Total scanned ports: 197
Open ports: 0
Closed ports: 0
Filtered ports: 197
For the ultimate trojan detector and security scan, consider a SG Premium Account. The premium version of our security scan includes many additional ports, and is constantly updated to detect new trojans/backdoors and other possible vulnerabilities.
Our Security Scan found NO open ports.

For a 20mb connection your RWIN is too low. First try the following settings with the TCPOptimizer:

General Settings tab:

Custom settings - check
Modify All Network Adapters - check
network adapter selection - your NIC
MTU - 1492
TTL - 64
TCP Receive Window - 255552
MTU Discovery - Yes
Black Hole Detect - No
Selective Acks - Yes
Max Duplicate ACKs - 3
TCP 1323 Options:
Windows Scaling - check
Timestamps - uncheck

Advanced Settings tab:

Max Connections per Server - 10
Max Connections per 1.0 Server - 20
LocalPriority - 5
Host Priority - 6
DNSPriority - 7
NetbtPriority - 8
Lan Browsing speedup - optimized
QoS: NonBestEffortLimit - 0
ToS: DisableUserTOSSetting - 0
ToS: DefaultTOSValue - 92
MaxNegativeCacheTtl - 0
NetFailureCacheTime - 0
NegativeSOACache Time - 0
LAN Request Buffer Size - 32768

Then select "Apply Changes" and reboot to take effect.

Then please post a HijackThis log.

mnosteele52 wrote:For a 20mb connection your RWIN is too low. First try the following settings with the TCPOptimizer

His RWIN is 511104.

YARDofSTUF wrote:His RWIN is 511104.

Hi.. thank you both for looking into my case. I am a bit confused, is my RWIN too low, or is OK? I have tried the RWIN settings advised above but I think the current, 511104 seem faster. Nevertheless, I am here for your advise, if you say the above settings, fine with me,

Thanks again,

Best Regards,

Contact

Keep the 511104, I assume steele saw your unscaled size and thought it was your RWIN value.

Do a speed test at http://www.speedtest.net

Copy and post the forum link when its done.

Dear mnosteele52 & YARDofSTUF,

Below you will find the HijackThis log, I did recognise at least one item on there, I 'tested' paltalk, but uninstalled it, so don't know why it is still referring to that. Any advise is welcome, as explained before. If Messenger is taking up too much bandwidth, it will be dealt with, hardly used. Please let me know...

Best Regards and thank you again,

Contact



C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CachemanXP\CachemanXP.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Nico\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://ezproxy.liv.ac.uk:3583/lib/liver ... aryRdr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microso ... 0844943238
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 0844931628
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CachemanXP (CachemanXPService) - Outertech - C:\Program Files\CachemanXP\CachemanXP.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

--
End of file - 4907 bytes

Check and fix the following in hijackthis:


R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe (file missing)
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)

YARDofSTUF wrote:His RWIN is 511104.

Your right, sorry I was looking at the wrong info. Did you try the lower number I suggested? If so did it work any better? You might also try uninstalling Comodo, it is a great firewall but there may be a conflict or something wrong with it and it could be your slowdown.

Hi again,

Below you will find the link from speedtest; I will also uninstall and reinstall Comodo, see what happens. One mention. I stopped using IE7 for Firefox some time ago, however all speed tests seem faster in IE7. I have uninstalled and reinstalled Firefox, during a previous trial but I still find IE7 faster, both in loading pages and the Speedtest.

There must be something we can look at to get at least another 30% on top of what I have... any help?

THanks a lot again.

Best Regards,

Nico

YARDofSTUF wrote:Keep the 511104, I assume steele saw your unscaled size and thought it was your RWIN value.

Do a speed test at http://www.speedtest.net

Copy and post the forum link when its done.

somehow missed the link....

Dear All,

Was that it? No one else to help? No other ideas?

Thanks,

Contact

I suggested lowering your RWIN and uninstalling Comodo to see if it helps and you never replied back if it did?

mnosteele52 wrote:I suggested lowering your RWIN and uninstalling Comodo to see if it helps and you never replied back if it did?

Hi again...

I followed your TCP and lower RWIN mentioned earlier, uninstalled Comodo and then did a speed test as below:



I also did the speed test in IE7 because it seems to give higher downloads than Firefox.

Below is the Hijack This:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:08:37 AM, on 10/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CachemanXP\CachemanXP.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\usnsvc.exe


R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://ezproxy.liv.ac.uk:3583/lib/liver ... aryRdr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microso ... 0844943238
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 0844931628
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CachemanXP (CachemanXPService) - Outertech - C:\Program Files\CachemanXP\CachemanXP.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

--
End of file - 3645 bytes

Your HiJackThis log does not show any problem.

Do this NDT and post the report under the 'Statistics' button:

http://miranda.ctd.anl.gov:7123/

Do u have traffic congestions problems now or solved? DSL or cable?

trogers wrote:Your HiJackThis log does not show any problem.

Do this NDT and post the report under the 'Statistics' button:

http://miranda.ctd.anl.gov:7123/

WEB100 Enabled Statistics:
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client to server) . . . . . 630.71Kb/s
running 10s inbound test (server to client) . . . . . . 5.02Mb/s

------ Client System Details ------
OS data: Name = Windows XP, Architecture = x86, Version = 5.1
Java data: Vendor = Sun Microsystems Inc., Version = 1.6.0_03

------ Web100 Detailed Analysis ------
Cable modem/DSL/T1 link found.
Link set to Full Duplex mode
Information: throughput is limited by other network traffic.
Good network cable(s) found
Normal duplex operation found.

Web100 reports the Round trip time = 130.28 msec; the Packet size = 1452 Bytes; and
There were 21 packets retransmitted, 139 duplicate acks received, and 139 SACK blocks received
The connection stalled 1 times due to packet loss
The connection was idle 0.36 seconds (3.59%) of the time
This connection is network limited 99.71% of the time.

Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgment: ON
RFC 896 Nagle Algorithm: ON
RFC 3168 Explicit Congestion Notification: OFF
RFC 1323 Time Stamping: OFF
RFC 1323 Window Scaling: ON
Information: Network Middlebox is modifying MSS variable
Server IP addresses are preserved End-to-End
Information: Network Address Translation (NAT) box is modifying the Client's IP address
Server says [.......] but Client says [............]




WEB100 Enabled Statistics:
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client to server) . . . . . 629.14Kb/s
running 10s inbound test (server to client) . . . . . . 3.98Mb/s

------ Client System Details ------
OS data: Name = Windows XP, Architecture = x86, Version = 5.1
Java data: Vendor = Sun Microsystems Inc., Version = 1.6.0_03

------ Web100 Detailed Analysis ------
Cable modem/DSL/T1 link found.
Link set to Full Duplex mode
Information: throughput is limited by other network traffic.
Good network cable(s) found
Normal duplex operation found.

Web100 reports the Round trip time = 130.68 msec; the Packet size = 1452 Bytes; and
There were 3 packets retransmitted, 74 duplicate acks received, and 75 SACK blocks received
The connection stalled 1 times due to packet loss
The connection was idle 0.36 seconds (3.59%) of the time
This connection is network limited 99.97% of the time.

Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgment: ON
RFC 896 Nagle Algorithm: ON
RFC 3168 Explicit Congestion Notification: OFF
RFC 1323 Time Stamping: OFF
RFC 1323 Window Scaling: ON
Information: Network Middlebox is modifying MSS variable
Server IP addresses are preserved End-to-End
Information: Network Address Translation (NAT) box is modifying the Client's IP address
Server says [........] but Client says [..........]


Hi again, I did the test twice and pasted the information above. I removed the IP addresses, is it wise to do that on here, I don't know but its an open forum; not meant at you. As explained before, your help is really appreciated.

Best Regards,

Nico

100 010 00 wrote:Do u have traffic congestions problems now or solved? DSL or cable?

Hi..thanks for asking, I still have congested traffic ADSL. NDT reports "Information: throughput is limited by other network traffic.". I have checked and rechecked and rechecked the system, with and without comodo, scanned for viruses, malaware, spyware, everything advised and anything I could think of.

Thanks for helping; if you look above you will see the latest stats. Thanks again...

Best Regards,

Nico

Are you on a wireless router?

The NDT indicated signal problem as seen in stalling of the connection.

Do a tracert to http://www.yahoo.com and post.

also post your signal/noise ratio and line attenuation. log in to your modem to see those infos. something else, the traffic congestion is all the time or not?

trogers wrote:Are you on a wireless router?

The NDT indicated signal problem as seen in stalling of the connection.

Do a tracert to http://www.yahoo.com and post.

Hi again,

I did two tracerts, the first with the firewall on and the second turn to allow all. This may look promising however what does the first timeouts and No. 5 in the second test mean. Hopefully we have found something we can work on...

Thanks Trogers



Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Nico>tracert http://www.yahoo.com

Tracing route to http://www.yahoo-ht3.akadns.net [87.248.113.14]
over a maximum of 30 hops:

1 * * * Request timed out.
2 * * * Request timed out.
3 16 ms 16 ms 16 ms s55904c01.adsl.wanadoo.nl [85.144.76.1]
4 21 ms 21 ms 22 ms V707.dr4-asd5.nl.euro.net [194.134.155.133]
5 22 ms 20 ms 20 ms G5-1.cr1-asd5.nl.euro.net [194.134.161.21]
6 21 ms 22 ms 21 ms 10GE1-1.cr1-asd6.nl.euro.net [194.134.161.161]
7 21 ms 21 ms 20 ms PC11.er1-asd6.nl.euro.net [194.134.161.81]
8 21 ms 20 ms 20 ms ge-0-1-0-0.amscr1.Amsterdam.opentransit.net [193
.251.254.193]
9 21 ms 22 ms 20 ms adm-b2-link.telia.net [213.248.73.129]
10 22 ms 21 ms 21 ms adm-bb1-link.telia.net [80.91.254.134]
11 31 ms 30 ms 30 ms ldn-bb1-pos7-0-0.telia.net [213.248.65.149]
12 41 ms 41 ms 41 ms dln-b1-link.telia.net [80.91.250.85]
13 47 ms 47 ms 47 ms yahoo-115023-dln-b1.c.telia.net [213.155.141.182
]
14 47 ms 48 ms 46 ms ge-1-3.bas-b1.ird.yahoo.com [87.248.101.5]
15 48 ms 48 ms 49 ms f1.us.http://www.vip.ird.yahoo.com [87.248.113.14]

Trace complete.

..................................Below with Comodo switched to "allow all"


Tracing route to http://www.yahoo-ht3.akadns.net [87.248.113.14]
over a maximum of 30 hops:

1 * * * Request timed out.
2 * * * Request timed out.
3 18 ms 16 ms 16 ms s55904c01.adsl.wanadoo.nl [85.144.76.1]
4 22 ms 21 ms 21 ms V707.dr4-asd5.nl.euro.net [194.134.155.133]
5 178 ms 200 ms 204 ms G5-1.cr1-asd5.nl.euro.net [194.134.161.21]
6 21 ms 21 ms 20 ms 10GE1-1.cr1-asd6.nl.euro.net [194.134.161.161]
7 21 ms 21 ms 20 ms PC11.er1-asd6.nl.euro.net [194.134.161.81]
8 23 ms 35 ms 20 ms ge-0-1-0-0.amscr1.Amsterdam.opentransit.net [193
.251.254.193]
9 21 ms 21 ms 21 ms adm-b2-link.telia.net [213.248.73.129]
10 21 ms 22 ms 21 ms adm-bb1-link.telia.net [80.91.254.134]
11 30 ms 30 ms 36 ms ldn-bb1-pos7-0-0.telia.net [213.248.65.149]
12 41 ms 41 ms 42 ms dln-b1-link.telia.net [80.91.250.85]
13 47 ms 47 ms 46 ms yahoo-115023-dln-b1.c.telia.net [213.155.141.182
]
14 47 ms 47 ms 46 ms ge-1-1.bas-b1.ird.yahoo.com [87.248.101.1]
15 47 ms 47 ms 47 ms f1.us.http://www.vip.ird.yahoo.com [87.248.113.14]

Trace complete.


Thanks again,

Best Regards,

Nico

100 010 00 wrote:also post your signal/noise ratio and line attenuation. log in to your modem to see those infos. something else, the traffic congestion is all the time or not?

Hi...Trogers I Sorry forgot to mention; not on wireless - all cable.

I just spoke to my ISP and they explained there was 'some' noise on my line and advised high quality cables, however I don't think this is the problem. I connected the modem to a very short, 30cm cable this morning and see no difference. PC speakers about a metre away, connection wall outlet right next to the modem.

What do you think, how can I measure my own noise and secondly how do I isolate it

Thanks again, stats below

Nico

TCP/Web100 Network Diagnostic Tool v5.3.4e
click START to begin
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client to server) . . . . . 622.59Kb/s
running 10s inbound test (server to client) . . . . . . 5.16Mb/s
Your PC is connected to a Cable/DSL modem
Information: Other network traffic is congesting the link

The timed out at hops 1 and 2 could be due to the firewall in your router.

As noticed by you, an intermediate router at hop 5 shows high pings.

To carry out a more detail check on signal route, Google and use PingPlotter.

5 178 ms 200 ms 204 ms G5-1.cr1-asd5.nl.euro.net [194.134.161.21]

trogers wrote:The timed out at hops 1 and 2 could be due to the firewall in your router.

As noticed by you, an intermediate router at hop 5 shows high pings.

To carry out a more detail check on signal route, Google and use PingPlotter.

5 178 ms 200 ms 204 ms G5-1.cr1-asd5.nl.euro.net [194.134.161.21]

I have two examples below; they show pretty cleary that the two addresses are lagging; what do I do now? Thanks again

Target Name: ftp.orange.nl
IP: 194.134.17.10
Date/Time: 10/21/2007 1:50:43 AM

1 * * [-]
2 * * [-]
3 17 ms 16 ms s55904c01.adsl.wanadoo.nl [85.144.76.1]
4 20 ms 21 ms V707.dr4-asd5.nl.euro.net [194.134.155.133]
5 20 ms 204 ms GX-X.cr2-asd4.nl.euro.net [194.134.162.21]
6 22 ms 98 ms G3-2.cr2-asd2.nl.euro.net [194.134.162.194]
7 22 ms 21 ms G2-2.dr1-asd2.nl.euro.net [194.134.162.118]
8 21 ms 21 ms ftp.wanadoo.nl [194.134.17.10]



Target Name: ftp.orange.nl
IP: 194.134.17.10
Date/Time: 10/21/2007 1:50:43 AM to 10/21/2007 1:52:58 AM

1 * * * * * * * * * * [-]
2 * * * * * * * * * * [-]
3 17 ms 16 ms 16 ms 16 ms 16 ms 16 ms 16 ms 16 ms 16 ms 16 ms

s55904c01.adsl.wanadoo.nl [85.144.76.1]
4 20 ms 21 ms 20 ms 45 ms 20 ms 20 ms 21 ms 20 ms 20 ms 20 ms

V707.dr4-asd5.nl.euro.net [194.134.155.133]
5 20 ms 204 ms 20 ms 21 ms 20 ms 20 ms 20 ms 20 ms 20 ms 20 ms GX-

X.cr2-asd4.nl.euro.net [194.134.162.21]
6 22 ms 98 ms 20 ms 210 ms 22 ms 64 ms 21 ms 22 ms 20 ms 20 ms G3-

2.cr2-asd2.nl.euro.net [194.134.162.194]
7 22 ms 21 ms 21 ms 21 ms 63 ms 20 ms 20 ms 22 ms 22 ms 22 ms G2-

2.dr1-asd2.nl.euro.net [194.134.162.118]
8 21 ms 21 ms 21 ms 20 ms 20 ms 20 ms 21 ms 21 ms 20 ms 21 ms

ftp.wanadoo.nl [194.134.17.10]

Ping statistics for ftp.orange.nl
Packets: Sent = 10, Received = 10, Lost = 0 (0.0%)
Round Trip Times: Minimum = 20ms, Maximum = 21ms, Average = 20ms

What kind of firewall and antivirus software are you using?

trogers wrote:What kind of firewall and antivirus software are you using?

I am using the trial NOD32 and Comodo - have uninstalled both before upon advice and the tests didn't show any difference - I am back to the original settings you advised on TCPopt.

Thanks again,

Nico

Contact wrote:5 178 ms 200 ms 204 ms G5-1.cr1-asd5.nl.euro.net [194.134.161.21]

Go to start>run and type cmd
in the black prompt window type this : ping -n 60 194.134.161.21 >c:/ping.txt
After finished, open your c:/ , find the ping.txt file and post it, to see if the latency problem with that IP still exists.

Then also type in the prompt window.......... pathping http://www.YOUR-ISP.com >c:/pathping.txt (that lasts for about 3-4 minutes) find it and post it

100 010 00 wrote:Go to start>run and type cmd
in the black prompt window type this : ping -n 60 194.134.161.21 >c:/ping.txt
After finished, open your c:/ , find the ping.txt file and post it, to see if the latency problem with that IP still exists.

Then also type in the prompt window.......... pathping http://www.YOUR-ISP.com >c:/pathping.txt (that lasts for about 3-4 minutes) find it and post it

I hope I have done it correctly. The pathping had me copying what you wrote below, but then I figured out you meant Orange, replacing YOU-ISP.com

I am not sure if I did it correctly but used the ftp and DNS servers of my ISP. Let me know if this is what we needed?

Thanks again, all this effort; I cannot believe what brilliance lies behind this site. As with everything like this, its the people that have the patience and the motivation to help; that makes a major difference, and you are doing it just for the love of technology; thanks again.


C:\Documents and Settings\Nico>ping -n 60 194.134.161.21

Pinging 194.134.161.21 with 32 bytes of data:

Reply from 194.134.161.21: bytes=32 time=21ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=21ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=19ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=21ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=63ms TTL=252
Reply from 194.134.161.21: bytes=32 time=29ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=19ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=35ms TTL=252
Reply from 194.134.161.21: bytes=32 time=75ms TTL=252
Reply from 194.134.161.21: bytes=32 time=80ms TTL=252
Reply from 194.134.161.21: bytes=32 time=67ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252
Reply from 194.134.161.21: bytes=32 time=21ms TTL=252
Reply from 194.134.161.21: bytes=32 time=20ms TTL=252

Ping statistics for 194.134.161.21:
Packets: Sent = 60, Received = 60, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 19ms, Maximum = 80ms, Average = 23ms


C:\Documents and Settings\Nico>pathping 194.134.5.55

Tracing route to dns.wanadoo.nl [194.134.5.55]
over a maximum of 30 hops:
0 n-sqh9v38337tjf [192.168.1.10]
1 * * *
Computing statistics for 25 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 n-sqh9v38337tjf [192.168.1.10]
100/ 100 =100% |
1 --- 100/ 100 =100% 0/ 100 = 0% n-sqh9v38337tjf [0.0.0.0]

Trace complete.

C:\Documents and Settings\Nico>pathping home.orange.nl

Tracing route to home.orange.nl [194.134.17.24]
over a maximum of 30 hops:
0 n-sqh9v38337tjf [192.168.1.10]
1 * * *
Computing statistics for 25 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 n-sqh9v38337tjf [192.168.1.10]
100/ 100 =100% |
1 --- 100/ 100 =100% 0/ 100 = 0% n-sqh9v38337tjf [0.0.0.0]

Trace complete.

there are some unacceptable hops during the ping times, like 67ms, 80ms etc. and this is the result if u are not spyware free or ISPs DNS server bad routing............ or borh
About pathping....... is a tracing command that u cannot access probably from your hardware firewall. If u can manage your firewall to trace your ISP, trace through his address and not through IP

Using an open DNS server is an option to overcome bad routing by your ISP's DNS server. See this: http://www.opendns.com/how/dns/turning- ... to-numbers

trogers wrote:Using an open DNS server is an option to overcome bad routing by your ISP's DNS server. See this: http://www.opendns.com/how/dns/turning- ... to-numbers

Dear Trogers!

Wow...a few weeks later and we recovered 10 whole MBs/s, from the first time you supported me!. Thank you very much for all you help. Just to let you know, I used OpenDNS for a while and back to my own ISP, automatic DNS.

I still have "Other network traffic is congesting the link" as you will view below.

TCP/Web100 Network Diagnostic Tool v5.3.4e
click START to begin
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client to server) . . . . . 627.20Kb/s
running 10s inbound test (server to client) . . . . . . 5.55Mb/s
Your PC is connected to a Cable/DSL modem
Information: Other network traffic is congesting the link

Do you think this is my barrier, or can I push it more. Is there anything else that I can do that will increase the final 2mbs/s out of 4. Is there anything I can do about the noise?

Just to let you know, reinstalled the os, Comodo and NOD32- TCPoPtimizer tweaks as advised by you in the earlier thread.

« SpeedGuide.net TCP Analyzer Results »
Tested on: 11.06.2007 18:27
IP address: 85.144.xx.xx

TCP options string: 020405ac0103030401010402
MSS: 1452
MTU: 1492
TCP Window: 1045440 (multiple of MSS)
RWIN Scaling: 4
Unscaled RWIN : 65340
Reccomended RWINs: 63888, 127776, 255552, 511104
BDP limit (200ms): 41818kbps (5227KBytes/s)
BDP limit (500ms): 16727kbps (2091KBytes/s)
MTU Discovery: ON
TTL: 39
Timestamps: OFF
SACKs: ON
IP ToS: 00000000 (0)


Any advice would help a lot. Again, thank you very much for getting me here, not trying to be greedy, but have to ask; if there is nothing we can do then that is also fine,

Best Regards,

Nico

In tweaks, we hope to achieve 90% of our subscribed speed, with the remaining 10% taken up by overheads.

TCP Window should be 1022208. Yours is at 1045440.

Try the following with TCP Optimizer:

General Settings tab:
Custom settings - check
Modify All Network Adapters - check
network adapter selection - your NIC
MTU 1492
TTL - 64
TCP Receive Window - 1022208
MTU Discovery - Yes
Black Hole Detect - No
Selective Acks - Yes
Max Duplicate ACKs - 2
TCP 1323 Options:
Windows Scaling - checked
Timestamps - uncheck

Advanced Settings tab:
Max Connections per Server - 10
Max Connections per 1.0 Server - 20
LocalPriority - 1
Host Priority - 1
DNSPriority - 1
NetbtPriority - 1
Lan Browsing speedup - optimized
QoS: NonBestEffortLimit - 0
ToS: DisableUserTOSSetting - 0
ToS: DefaultTOSValue - 80
MaxNegativeCacheTtl - 0
NetFailureCacheTime - 0
NegativeSOACache Time - 0
LAN Request Buffer Size - 32768
Then select "Apply Changes" and reboot to take effect

After reboot, do the NDT and post the report under the 'Statistics' button inorder to see the cause for the remarks "Other network traffic is congesting the link".

trogers wrote:In tweaks, we hope to achieve 90% of our subscribed speed, with the remaining 10% taken up by overheads.

TCP Window should be 1022208. Yours is at 1045440.

Try the following with TCP Optimizer:

After reboot, do the NDT and post the report under the 'Statistics' button inorder to see the cause for the remarks "Other network traffic is congesting the link".

Dear Trogers,

I have used the new or 'correct' TCP as above, don't know how I managed that. What I see now is no real change in the download speed, hoever here is the NDT -from both sites:

WEB100 Kernel Variables:
Client: localhost/127.0.0.1
AckPktsIn: 2493
AckPktsOut: 0
BytesRetrans: 66792
CongAvoid: 2062
CongestionOverCount: 0
CongestionSignals: 1
CountRTT: 2308
CurCwnd: 152460
CurMSS: 1452
CurRTO: 350
CurRwinRcvd: 1022208
CurRwinSent: 5840
CurSsthresh: 120516
DSACKDups: 0
DataBytesIn: 0
DataBytesOut: 6828756
DataPktsIn: 0
DataPktsOut: 4703
DupAcksIn: 168
ECNEnabled: 0
FastRetran: 0
MaxCwnd: 242484
MaxMSS: 1452
MaxRTO: 410
MaxRTT: 250
MaxRwinRcvd: 1022208
MaxRwinSent: 5840
MaxSsthresh: 120516
MinMSS: 1452
MinRTO: 350
MinRTT: 120
MinRwinRcvd: 63888
MinRwinSent: 5840
NagleEnabled: 1
OtherReductions: 12
PktsIn: 2493
PktsOut: 4703
PktsRetrans: 46
X_Rcvbuf: 107520
RcvWinScale: 7
SACKEnabled: 3
SACKsRcvd: 183
SendStall: 0
SlowStart: 263
SampleRTT: 120
SmoothedRTT: 120
X_Sndbuf: 107520
SndWinScale: 4
SndLimTimeRwin: 0
SndLimTimeCwnd: 10011163
SndLimTimeSender: 2972
SndLimTransRwin: 0
SndLimTransCwnd: 1
SndLimTransSender: 1
SndLimBytesRwin: 0
SndLimBytesCwnd: 6828756
SndLimBytesSender: 0
SubsequentTimeouts: 0
SumRTT: 296990
Timeouts: 1
TimestampsEnabled: 0
WinScaleRcvd: 4
WinScaleSent: 7
DupAcksOut: 0
StartTimeUsec: 462774
Duration: 10015976
c2sData: 2
c2sAck: 2
s2cData: 9
s2cAck: 4
half_duplex: 0
link: 100
congestion: 1
bad_cable: 0
mismatch: 0
spd: 0.00
bw: 5.90
loss: 0.000212630
avgrtt: 128.68
waitsec: 0.35
timesec: 10.00
order: 0.0674
rwintime: 0.0000
sendtime: 0.0003
cwndtime: 0.9997
rwin: 7.7988
swin: 64.0000
cwin: 1.8500
rttsec: 0.128679
Sndbuf: 8388608
aspd: 0.00000

Checking for mismatch on uplink
(speed > 50 [0>50], (xmitspeed < 5) [0.63<5]
(rwintime > .9) [0>.9], (loss < .01) [2.12<.01]
Checking for excessive errors condition
(loss/sec > .15) [2.12>.15], (cwndtime > .6) [0.99>.6],
(loss < .01) [2.12<.01], (MaxSsthresh > 0) [120516>0]
Checking for 10 Mbps link
(speed < 9.5) [0<9.5], (speed > 3.0) [0>3.0]
(xmitspeed < 9.5) [0.63<9.5] (loss < .01) [2.12<.01], (mylink > 0) [3.0>0]
Checking for Wireless link
(sendtime = 0) [3.0E=0], (speed < 5) [0<5]
(Estimate > 50 [5.9>50], (Rwintime > 90) [0>.90]
(RwinTrans/CwndTrans = 1) [0/1=1], (mylink > 0) [3.0>0]
Checking for DSL/Cable Modem link
(speed < 2) [0<2], (SndLimTransSender = 0) [1=0]
(SendTime = 0) [3.0E-4=0], (mylink > 0) [3.0>0]
Checking for half-duplex condition
(rwintime > .95) [0>.95], (RwinTrans/sec > 30) [0>30],
(SenderTrans/sec > 30) [0.1>30], OR (mylink <= 10) [3.0<=10]
Checking for congestion
(cwndtime > .02) [0.99>.02], (mismatch = 0) [0=0]
(MaxSsthresh > 0) [120516>0]

estimate = 5.9 based on packet size = 11Kbits, RTT = 128.68msec, and loss = 2.1263E-4
The theoretical network limit is 5.9 Mbps
The NDT server has a 8192.0 KByte buffer which limits the throughput to 497.36 Mbps
Your PC/Workstation has a 998.0 KByte buffer which limits the throughput to 60.60 Mbps
The network based flow control limits the throughput to 14.37 Mbps

Client Data reports link is 'T1', Client Acks report link is 'T1'
Server Data reports link is '10 Gig', Server Acks report link is 'T3'


----------------------------------------
Second:

WEB100 Enabled Statistics:
Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done
checking for firewalls . . . . . . . . . . . . . . . . . . . Done
running 10s outbound test (client-to-server [C2S]) . . . . . 468.0kb/s
running 10s inbound test (server-to-client [S2C]) . . . . . . 7.76Mb/s

------ Client System Details ------
OS data: Name = Windows XP, Architecture = x86, Version = 5.1
Java data: Vendor = Sun Microsystems Inc., Version = 1.6.0_03

------ Web100 Detailed Analysis ------
Cable modem/DSL/T1 link found.
Link set to Full Duplex mode
Information: throughput is limited by other network traffic.
Good network cable(s) found
Normal duplex operation found.

Web100 reports the Round trip time = 193.26 msec; the Packet size = 1452 Bytes; and
There were 33 packets retransmitted, 360 duplicate acks received, and 385 SACK blocks received
The connection was idle 0 seconds (0%) of the time
C2S throughput test: Packet queuing detected: 1.99%
S2C throughput test: Packet queuing detected: 0.50%
This connection is network limited 99.83% of the time.

Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgment: ON
RFC 896 Nagle Algorithm: ON
RFC 3168 Explicit Congestion Notification: OFF
RFC 1323 Time Stamping: OFF
RFC 1323 Window Scaling: ON

Server 'nitro.ucsc.edu' is not behind a firewall. [Connection to the ephemeral port was successful]
Client is probably behind a firewall. [Connection to the ephemeral port failed]
Information: Network Middlebox is modifying MSS variable
Server IP addresses are preserved End-to-End
Information: Network Address Translation (NAT) box is modifying the Client's IP address




What I have found with the new TCP is that IE takes longer to load and there is often a visible "second" pause before each sit loads. Almost like a bottleneck trying to break through...


Hope this helps Trogers,

Best Regards,

Nico

The lag could be due to a wrong CachemanXP setting. For a PC, do not use the file server setting.

Try the following with TCP Optimizer:

General Settings tab:
Custom settings - check
Modify All Network Adapters - check
network adapter selection - your NIC
MTU 1492
TTL - 64
TCP Receive Window - 511104
MTU Discovery - Yes
Black Hole Detect - No
Selective Acks - Yes
Max Duplicate ACKs - 2
TCP 1323 Options:
Windows Scaling - checked
Timestamps - uncheck

Advanced Settings tab:
Max Connections per Server - 10
Max Connections per 1.0 Server - 20
LocalPriority - 1
Host Priority - 1
DNSPriority - 1
NetbtPriority - 1
Lan Browsing speedup - optimized
QoS: NonBestEffortLimit - 0
ToS: DisableUserTOSSetting - 0
ToS: DefaultTOSValue - 80
MaxNegativeCacheTtl - 0
NetFailureCacheTime - 0
NegativeSOACache Time - 0
LAN Request Buffer Size - 32768
Then select "Apply Changes" and reboot to take effect