EFW running in VMPlayer under Windows SBS 2008 - loosing ping

[Guest]

[anduz]

Hello,

I'm having a lot of lost ping packets with my configuration.

PC ----- SBS 2008 (running EFW in VMPlayer) ----- Router ---- Internet

Using 1 NIC for Red (public ip address) and Green (LAN ip address, used as default gateway) interface

From PC:
Ping EFW - no problems
Ping www_google_com - looses packets

From SBS:
the same

From EFW (from Web Console):
Ping www_google_com - no lost packets, but 1 duplicate (DUP!)
Ping PC, SBS or Router - no lost packets, but 3 duplicates (DUP!)

Does anybody have an idea why this could be?


I noticed it's getting worse while there is more traffic through the gateway.

[fqureshi]

Have you enabled outgoing firewall as well? Disable it and test again,.

[anduz]

Hello,

thanks for the answer.

I've tried to disable all firewalls: Outgoing, Inter-zone, VPN

Still getting lost packets   

[fqureshi]

No worries. It seems ur network has unnecessary broadcast..... try to install wireshark on any machine and monitor the captured traffic. Wireshark is a free utility to capture packets receiving on network interface...

Check the source. ... this could also be due to worm/trojan in ur network...

Also please tell me the ping response from ur router to google.com

[anduz]

There shouldn't be any worms or trojans since we have Trendmicro running.
And the problem with lost pings comes up only when somebody is downloading.

I'm no expert with Wireshark, but i think this one is strange:
374   7.415591   91.203.96.252   192.168.162.105   TCP   54   [TCP Dup ACK 372#2] https > 52431 [ACK] Seq=1 Ack=181 Win=54 Len=0
21373   7.112204   80.74.184.133   82.106.176.137   TCP   66   [TCP Dup ACK 21324#1] https > trp [ACK] Seq=123 Ack=110 Win=4500 Len=0 SLE=1 SRE=110

91.203.96.252 seems to be an opera server?

ping to google.com about 60ms from router (efw running in vmware player)
ping while downloading up to 700ms

[fqureshi]

It is normal if few ping replies are lost when downloading is in progress....

Would you please tell me if you have disabled outgoing firewall?

And those wireshark output is only duplicate acknowledgements which again shows that there is bottleneck somewhere in your network most probably at outgoibg interface...


Have u disabled outgoing  firewall?

[fqureshi]

Also disable intrusion detection if you hav enabled it and try again...

[anduz]

The outgoing firewall is disabled.
Tried disabling intrusion detection an there are still lost replies.
And response times of about 900ms (this could be a connection problem at the moment), since I get the same response value with efw and the physical router as gateway.

[fqureshi]

Yes the response time from your gateway router (physical router) matters...always first check the ping response from router...

[anduz]

But unfortunately the problem persists, that internet browsing gets very slow and ping replies get lost, while I'm downloading.
May it be a problem with VMware Player? Or a setting on SBS 2008?
I've already tried to give the process a higher priority, even realtime, but nothing changed.