I have a customer that seems to be able to defeat the bandwidth shaping. I have all P2P shaped to a total of 384000 bps and a simple queue with 384000 on the IP of the customer.
However his connection is constantly running at 170kbps how can I determine what he is doing and stop him??? when I run sniffer all I see is lots of connections to strange ports…
Are there new P2P protocals that the microtik does not capture?? The Mikrotik is version 2.8.6
any help is greatly appreciated
Joe
Make sure you do not have too many 0 in his simple queue. We had a few clients that where pulling too much bandwidth and it turned out to be too many 0.
I think P2P filtering has been improved in later versions.
v2.8.12 is available.
However his connection is constantly running at 170kbps how can I determine what he is doing and stop him??? when I run sniffer all I see is lots of connections to strange ports…
Probably he has some virus, are you using torch, you can real time monitor anyones connection. Try to find out ‘logic’ for that virus and drop those packets from ip firewall, also see which protocol is he using if you drop tcp and virus is udp, you did nothing 