how-to block ads
|
Movieman420
join:2007-08-28
Rivesville, WV
| reply to jmccorm
Re: [OK] Cox doesn't mess with Bittorrent traffic, does it?
Here's the script I mentioned.
@ECHO OFF
REM
REM Title: NetStat Check Reset V3
REM
REM Description: Extract summary data from Netstat and display percentage of current, average and a histogram of connection resets.
REM
REM CURRENT percentages are the difference between the previous (20 seconds ago) and current Netstat results.
REM AVERAGE percentages are the running total of the current percentages.
REM HISTOGRAM is a ranking of the number of current percentages that occurred. This shows the distribution of resets from 1-99 percent.
REM
REM So while the Average percentage may be 35%, the Histogram may show the majority of Current percentages are in the 20% range
REM with some spikes in the 40% or 50% range. This would indicate normal reset activity to be in the 20% range and the focus would be
REM in resolving the spikes.
REM
SETLOCAL
TITLE NetStat Check Reset V3
CLS
ECHO NetStat Check Reset Batch V3 [Ctrl-c quit]
REM Initialize variables
:init
REM Histogram values
SET HST00=0
SET HST10=0
SET HST20=0
SET HST30=0
SET HST40=0
SET HST50=0
SET HST60=0
SET HST70=0
SET HST80=0
SET HST90=0
REM Histogram print strings
SET PST00=___
SET PST10=___
SET PST20=___
SET PST30=___
SET PST40=___
SET PST50=___
SET PST60=___
SET PST70=___
SET PST80=___
SET PST90=___
REM Loop counter for header print
SET /A TESTCYCLE=-1
REM run Netstat summary page, find line and save 2nd field value
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Active Opens"`) DO SET /A PRVACTI=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Passive Opens"`) DO SET /A PRVPASS=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Failed Connection Attempts"`) DO SET /A PRVFAIL=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Reset Connections"`) DO SET /A PRVRESE=%%i
REM Begin loop section
:begin
REM Increment test cycles
SET /A TESTCYCLE=%TESTCYCLE%+1
IF %TESTCYCLE% GEQ 10 SET /A TESTCYCLE=0
REM Ping to nul used as timer
REM Each ping approximately 1 second delay
REM Value of 20 used as minimum wait time for connection activity.
REM
ping -n 20 localhost >nul
REM run Netstat summary page, find line and save 2nd field value
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Active Opens"`) DO SET /A NXTACTI=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Passive Opens"`) DO SET /A NXTPASS=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Failed Connection Attempts"`) DO SET /A NXTFAIL=%%i
FOR /F "usebackq tokens=2 delims==" %%i IN (`netstat -s ^| find "Reset Connections"`) DO SET /A NXTRESE=%%i
REM Subtract Previous from Next to get Current
SET /A CURACTI=%NXTACTI%-%PRVACTI%
SET /A CURPASS=%NXTPASS%-%PRVPASS%
SET /A CURFAIL=%NXTFAIL%-%PRVFAIL%
SET /A CURRESE=%NXTRESE%-%PRVRESE%
REM Accumulate the totals for averaging
SET /A CUMACTI=%CUMACTI%+%CURACTI%
SET /A CUMPASS=%CUMPASS%+%CURPASS%
SET /A CUMFAIL=%CUMFAIL%+%CURFAIL%
SET /A CUMRESE=%CUMRESE%+%CURRESE%
REM Add Active and Passive connections then subtract Failed connections
REM Calculate Percentage of Resets
SET /A CURESTA=(%CURACTI%+%CURPASS%)-%CURFAIL%
REM Bypass divide by zero errors
SET /A CURPRCT=0
IF %CURESTA% NEQ 0 SET /A CURPRCT=(%CURRESE%*100)/%CURESTA%
REM Accumulate current results for session average
SET /A CUMESTA=(%CUMACTI%+%CUMPASS%)-%CUMFAIL%
REM Bypass divide by zero errors
SET /A CUMPRCT=0
IF %CUMESTA% NEQ 0 SET /A CUMPRCT=(%CUMRESE%*100)/%CUMESTA%
REM Load histogram with current percentages in the range of 1-99%
IF %CURPRCT% LEQ 0 GOTO display
:break00
IF %CURPRCT% GEQ 10 GOTO break10
SET /A HST00=%HST00%+1
SET PST00=%HST00%
IF %HST00% LSS 10 SET PST00=_%PST00%
IF %HST00% LSS 100 SET PST00=_%PST00%
GOTO display
:break10
IF %CURPRCT% GEQ 20 GOTO break20
SET /A HST10=%HST10%+1
SET PST10=%HST10%
IF %HST10% LSS 10 SET PST10=_%PST10%
IF %HST10% LSS 100 SET PST10=_%PST10%
GOTO display
:break20
IF %CURPRCT% GEQ 30 GOTO break30
SET /A HST20=%HST20%+1
SET PST20=%HST20%
IF %HST20% LSS 10 SET PST20=_%PST20%
IF %HST20% LSS 100 SET PST20=_%PST20%
GOTO display
:break30
IF %CURPRCT% GEQ 40 GOTO break40
SET /A HST30=%HST30%+1
SET PST30=%HST30%
IF %HST30% LSS 10 SET PST30=_%PST30%
IF %HST30% LSS 100 SET PST30=_%PST30%
GOTO display
:break40
IF %CURPRCT% GEQ 50 GOTO break50
SET /A HST40=%HST40%+1
SET PST40=%HST40%
IF %HST40% LSS 10 SET PST40=_%PST40%
IF %HST40% LSS 100 SET PST40=_%PST40%
GOTO display
:break50
IF %CURPRCT% GEQ 60 GOTO break60
SET /A HST50=%HST50%+1
SET PST50=%HST50%
IF %HST50% LSS 10 SET PST50=_%PST50%
IF %HST50% LSS 100 SET PST50=_%PST50%
GOTO display
:break60
IF %CURPRCT% GEQ 70 GOTO break70
SET /A HST60=%HST60%+1
SET PST60=%HST60%
IF %HST60% LSS 10 SET PST60=_%PST60%
IF %HST60% LSS 100 SET PST60=_%PST60%
GOTO display
:break70
IF %CURPRCT% GEQ 80 GOTO break80
SET /A HST70=%HST70%+1
SET PST70=%HST70%
IF %HST70% LSS 10 SET PST70=_%PST70%
IF %HST70% LSS 100 SET PST70=_%PST70%
GOTO display
:break80
IF %CURPRCT% GEQ 90 GOTO break90
SET /A HST80=%HST80%+1
SET PST80=%HST80%
IF %HST80% LSS 10 SET PST80=_%PST80%
IF %HST80% LSS 100 SET PST80=_%PST80%
GOTO display
:break90
IF %CURPRCT% GEQ 100 GOTO break100
SET /A HST90=%HST90%+1
SET PST90=%HST90%
IF %HST90% LSS 10 SET PST90=_%PST90%
IF %HST90% LSS 100 SET PST90=_%PST90%
GOTO display
:break100
REM Final formatting and print
:display
REM Assign values to print strings
SET PCUMESTA=%CUMESTA%
SET PCUMRESE=%CUMRESE%
SET PCUMPRCT=%CUMPRCT%
SET PCURESTA=%CURESTA%
SET PCURRESE=%CURRESE%
SET PCURPRCT=%CURPRCT%
REM Skip leading zero for negative numbers
IF %CUMESTA% LSS 0 GOTO dbreak1
IF %CUMESTA% LSS 10 SET PCUMESTA=0%CUMESTA%
:dbreak1
IF %CUMRESE% LSS 0 GOTO dbreak2
IF %CUMRESE% LSS 10 SET PCUMRESE=0%CUMRESE%
:dbreak2
IF %CURESTA% LSS 0 GOTO dbreak3
IF %CURESTA% LSS 10 SET PCURESTA=0%CURESTA%
:dbreak3
IF %CURRESE% LSS 0 GOTO dbreak4
IF %CURRESE% LSS 10 SET PCURRESE=0%CURRESE%
:dbreak4
REM Print line break and header every 10 cycles
IF %TESTCYCLE% EQU 0 ECHO .
IF %TESTCYCLE% EQU 0 ECHO %TIME% - CURRENT AVERAGE I 00%% I 10%% I 20%% I 30%% I 40%% I 50%% I 60%% I 70%% I 80%% I 90%% I
REM Print Current percentage, Average Percentage and Histogram
ECHO %TIME% - %PCURPRCT%%% (%PCURRESE%/%PCURESTA%) %PCUMPRCT%%% (%PCUMRESE%/%PCUMESTA%) I %PST00% I %PST10% I %PST20% I %PST30% I %PST40% I %PST50% I %PST60% I %PST70% I %PST80% I %PST90% I
REM Save values into Previous
SET /A PRVACTI=%NXTACTI%
SET /A PRVPASS=%NXTPASS%
SET /A PRVFAIL=%NXTFAIL%
SET /A PRVRESE=%NXTRESE%
REM Loop again
GOTO begin
Copy and paste this in notepad and save it as CheckRST.bat
Then run it whilst seeding to see if your getting hit by sandvine. More deets here:
»How to test how many connections are being reset by RST pack | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
 ·Verizon Online DSL
 ·Skype
| Some of the Cox reports seem to match my experience with Comcast.
Guys, use the links at the bottom of my post here, and post your results, please.
A wireshark capture of this interference would also be excellent evidence.
-- Robb Topolski | |
Fubar
join:2001-02-20
Phoenix, AZ
| said by funchords  :Some of the Cox reports seem to match my experience with Comcast. Guys, use the links at the bottom of my post here, and post your results, please. A wireshark capture of this interference would also be excellent evidence. -- Robb Topolski Umm....Links? | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
1 edit | said by Fubar :Umm....Links? That's Odd.
Perhaps my message wasn't long enough to generate a signature. At any rate:
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report.
Thanks for letting me know! 
--Robb
Ironically, a signature will probably appear below, too!
--
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report. | |
spanglo
Premium
join:2004-05-17
San Diego, CA
| reply to MarkyD
said by MarkyD :I am starting to think that Cox is using Sandvine in a testing phase in certain markets, OKC being one of them. I personally know of four people that are noticing BitTorrent slowdowns (significant) on Cox in OKC. When I was running Cox and AT&T side by side for a few days, I started one torrent on my AT&T connection and was able to max out my connection with it. The download on Cox was stuck at 80KB/sec. I have no proof that Cox is doing anything...just observations. Sounds like a hell of a observation to me. | |
jmccorm
join:2003-08-17
Tulsa, OK
| reply to jmccorm
A new response from Cox, including a very direct and unambiguous denial. I'd note that the malformed paragraphs are indicative of heavy cutting and pasting. Emphasis (below) is mine. So here you have it. Cox denies interfering with BitTorrent. (Unless they want to argue that they're not actively interfering with it, but passively interfering with it?!)
Thank you for your e-mail to Cox Communications. I understand that you
want to know if Cox interfere in any way with BitTorrent
traffic? I apologize for this inconvenience.
As you might know Bit Torrent is a Peer-to-Peer service. BitTorrent
metafiles do not store copyrighted data, hence the technology itself
does not constitute copyright infringement. Nevertheless, majority of
BitTorrent trackers users utilize the technology to download
copyrighted
material such as movies and software without legally purchasing them,
consequently, it led to tremendous legal pressure, usually from the
MPAA
and RIAA, to shut down numerous BitTorrent trackers.
Cox Communications adhere with the Intellectual Property Infringement
policy. You may not use the Service to post, copy, transmit, or
disseminate any content that infringes the patents, copyrights, trade
secrets, trademark, or propriety rights of any party. Cox assumes no
responsibility, and you assume all risks regarding the determination of
whether material is in the public domain, or may otherwise be used by
you for such purposes. We do not actively interfere with BitTorrent
and
you are solely responsible for using the service.
Cox also blocks some ports for security reasons. If BitTorrent uses any
of these port, it could be blocked. Please visit the link below where
you can find additional information of the ports Cox block. | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
| said by jmccorm :A new response from Cox, including a very direct and unambiguous denial. [...] We do not actively interfere with BitTorrent Excellent! Thanks for sharing this information!
(All: While this looks rather definitive, I'd still appreciate the information -- user test results -- that I mentioned above.)
--
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report. | |
Tsume
join:2004-02-23
Johnson City, TN
·Embarq
·ViaTalk
 ·Comcast
| said by funchords :said by jmccorm :A new response from Cox, including a very direct and unambiguous denial. [...] We do not actively interfere with BitTorrent Excellent! Thanks for sharing this information! (All: While this looks rather definitive, I'd still appreciate the information -- user test results -- that I mentioned above.) I'm at work so I cannot run the test, however I have not experienced any meddling of my Bittorrent packets here in San Diego. I'd have noticed if my speeds dipped drastically
For a long while though they have been blocking Gnutella1/2 and ED2K uploads. The connection is almost instantly reset, and little if any data is uploaded (16kB or less). This wasn't always the case but has been the case for at least a year now. A notable exception is uploads DO go through if the receiver is on the COX network. | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
| Hey Tsume -- long time!!
said by Tsume :I'm at work so I cannot run the test, however I have not experienced any meddling of my Bittorrent packets here in San Diego. I'd have noticed if my speeds dipped drastically You won't notice a speed dip. What you will notice is that, while seeding, several clients will attempt to connect and will only remain connected for 1-3 seconds (disconnected at the handshake) or for 30-60 seconds (disconnected at the BT_REQUEST packet).
Normally, these disconnections shouldn't happen (unless you or the peer is using BitComet which does disconnect on its own).
Using uTorrent, Azureus, or the official BitTorrent client, if you're seeding a large popular file for an hour, you normally will see many peers that are leeching for over 30 minutes in your peer list. However, if Sandvine is interfering, peers rarely can stay connected that long.
If you have logging enabled, you will see error messages relating to Aborted or Reset connections, or Winsock error 10053.
said by Tsume :For a long while though they have been blocking Gnutella1/2 and ED2K uploads. The connection is almost instantly reset, and little if any data is uploaded (16kB or less). This wasn't always the case but has been the case for at least a year now. A notable exception is uploads DO go through if the receiver is on the COX network. That is the Sandvine behavior! Can you get a wireshark capture of this? Either post it here or send it to robb(at-sign)funchords.com, please. (If I use it, I'll make sure to clean it up to protect any identity concerns you might have.)
Thanks
--Robb
--
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report. | |
dvd536
as Mr. Pink as they come
Premium
join:2001-04-27
Phoenix, AZ
| reply to Tsume
said by Tsume :said by funchords :said by jmccorm :A new response from Cox, including a very direct and unambiguous denial. [...] We do not actively interfere with BitTorrent Excellent! Thanks for sharing this information! (All: While this looks rather definitive, I'd still appreciate the information -- user test results -- that I mentioned above.) I'm at work so I cannot run the test, however I have not experienced any meddling of my Bittorrent packets here in San Diego. I'd have noticed if my speeds dipped drastically For a long while though they have been blocking Gnutella1/2 and ED2K uploads. The connection is almost instantly reset, and little if any data is uploaded (16kB or less). This wasn't always the case but has been the case for at least a year now. A notable exception is uploads DO go through if the receiver is on the COX network. Of course COX doesn't interfere with BT, its the sandvine device that does it.
--
You can never be too rich, too thin or have too much Bandwidth | |
Tsume
join:2004-02-23
Johnson City, TN
·Embarq
·ViaTalk
·Comcast
| reply to funchords
said by funchords :Hey Tsume -- long time!! said by Tsume :I'm at work so I cannot run the test, however I have not experienced any meddling of my Bittorrent packets here in San Diego. I'd have noticed if my speeds dipped drastically You won't notice a speed dip. What you will notice is that, while seeding, several clients will attempt to connect and will only remain connected for 1-3 seconds (disconnected at the handshake) or for 30-60 seconds (disconnected at the BT_REQUEST packet). Normally, these disconnections shouldn't happen (unless you or the peer is using BitComet which does disconnect on its own). Using uTorrent, Azureus, or the official BitTorrent client, if you're seeding a large popular file for an hour, you normally will see many peers that are leeching for over 30 minutes in your peer list. However, if Sandvine is interfering, peers rarely can stay connected that long. If you have logging enabled, you will see error messages relating to Aborted or Reset connections, or Winsock error 10053. said by Tsume :For a long while though they have been blocking Gnutella1/2 and ED2K uploads. The connection is almost instantly reset, and little if any data is uploaded (16kB or less). This wasn't always the case but has been the case for at least a year now. A notable exception is uploads DO go through if the receiver is on the COX network. That is the Sandvine behavior! Can you get a wireshark capture of this? Either post it here or send it to robb(at-sign)funchords.com, please. (If I use it, I'll make sure to clean it up to protect any identity concerns you might have.) Thanks --Robb *grudgingly reinstalls Shareaza*
I shall! For great justice. | |
Tsume
join:2004-02-23
Johnson City, TN
·Embarq
·ViaTalk
·Comcast
1 edit | Okay Mr Robb, I sent you a PM of my wireshark monitoring the TCP port Shareaza was using while open for 7 minutes roughly, and I am posting a quick screenie here (I think I've blanked out the appropriate things on this image).
Edit: A small note. The progress bars on those "completed" uploads are all empty, at 0%. That's just how Shareaza shows an ended upload after it's reached the stage of connection established. As far as it knows, the person started downloading it and said wait, screw that, and canceled it. In reality, nothing was transferred and the other person had nothing to do with it. It was COX.
Link to a post I made in 2005 about this on gnutellaforums:
»www.gnutellaforums.com/general-g···ing.html | |
nchw68
join:2003-03-19
Chula Vista, CA
| reply to jmccorm
I don't use Bittorrent, but here's a few threads that show my experience with Cox and P2P.
»Cox vs. SBC
»[RI] Bittorrent just stopped uploading.... | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
1 edit | reply to Tsume
Here's Proof: Cox Interferes with P2P Uploads
Excellent, Tsume! This is the same behavior seen on Comcast with Sandvine's interference with many of the P2P protocols.
The following capture was on the eDonkey network between a Cox user and a user in Tel-Aviv, Israel. In this exchange, the non-Cox user connects, handshakes, and then requests parts, at which time the connection is immediately disrupted by an abort signal (TCP flag RST). The same pattern is repeated for all download requests.
Here are the other attempts from peers attempting to download from a peer using Cox:
All of the above requests were interrupted by an injected, forged TCP packet with the Abort/Reset [RST] flag set. If the other client actually intended to break off communication, it would have sent a FIN packet as shown in the following...
This is conclusive proof that Cox is interfering with eDonkey uploads by abusing the RST (abort/reset) flag.
--Robb Topolski
--
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report. | |
kingofdsl
join:2002-12-11
Afton, OK | This is conclusive proof that Cox is interfering with eDonkey uploads by abusing the RST (abort/reset) flag.
--Robb Topolski
=======================================================
How is it abuse when Cox owns the network? | |
wierdo
join:2001-02-16
Tulsa, OK
·Future Nine Corpor..
·Teliax VOIP
1 edit | reply to funchords
I'm not saying this is what's happening in this particular case, but there do exist broken NAT devices that lose track of NAT mappings when being beaten on by a BT client and thus send an RST when they receive an "unexpected" (only unexpected because the NAT table filled up, of course) packet.
RSTs are not in and of themselves abnormal with broken NAT devices or broken end user machines. NAT tables filling and a crash of the BT client at the far end can both cause the OS itself (either on the NAT device or the endpoint) to send said RST.
Edited to add: To be clear, RSTs are perfectly normal when one end thinks there is a TCP connection in progress and the other end doesn't. That's how TCP deals with such a state mismatch. | |
robertfl
Premium
join:2005-10-10
Mary Esther, FL | Welcome to 1984. I think other ISP's will follow suit as well.
-Rob | |
kabhal
Premium
join:2002-02-05
Oklahoma City, OK
2 edits | reply to jmccorm
Re: [OK] Cox doesn't mess with Bittorrent traffic, does it?
I came to Cox from AT&T because Cox had a faster tier. 12000/1000; with at&t the highest I had was 6016/768 - but the connection was rock solid and worked great with at&t, web/torrents/usenet/ftp/gaming whatever. So no problems with that, they just didn't have the fastest speed.
I haven't tried torrents much yet with my new Cox 12000/1000 so I don't know about any "interferance", but my newsgroup downloads are fantastic. =) Unbelievably fast. I use giganews/newzbin/and newsleecher and my god, it's like night and day speedwise vs AT&T. Really great speeds. I'm really happy with it (had it for about month and half now) so I hope they don't start limiting/degrading usenet access like they are doing with torrents.  | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
| reply to wierdo
Re: Here's Proof: Cox Interferes with P2P Uploads
said by wierdo :I'm not saying this is what's happening in this particular case, but there do exist broken NAT devices that lose track of NAT mappings when being beaten on by a BT client and thus send an RST when they receive an "unexpected" (only unexpected because the NAT table filled up, of course) packet. Great question. According to the BEHAVE IETF Working Group, NAT devices should send an ICMP unreachable error and/or drop the packet in that case.
In this case, however, the RST is following an exact pattern that repeats. With the SYN long past, and a data packet received less than 100 ms. ago, there's no valid reason a remote peer should generate a reset.
This is clearly interference, it matches the Comcast eDonkey interference.
--
Robb Topolski -= funchords.com =- Hillsboro, Oregon USA
Are you affected by Comcast's RST forging? How to test it! -or- Read my original report. | |
funchords
Hello
Premium,MVM
join:2001-03-11
Washington, DC
·Verizon Online DSL
·Skype
| reply to kingofdsl
said by kingofdsl :How is it abuse when Cox owns the network? Answered here:
»My use of the word 'Abuse' | |
|
