Slashdot Mirror


Sandvine CEO Says Internet Monitoring a Necessity

Khalid Baheyeldin writes in with a CBC interview with the CEO of Sandvine, Dave Caputo (bio here). Sandvine is the Waterloo, Ontario-based company that provides the technology that Comcast and other ISPs use to overrule Net neutrality by, for example, injecting RST packets to disrupt Bittorrent traffic. Caputo says, among other things, that Internet monitoring is a necessity. Some of the comments to the interview are more tech-savvy than the interviewee comes across.

5 of 171 comments (clear)

  1. Beating Sandvine by Misanthrope · · Score: 5, Informative

    http://redhatcat.blogspot.com/2007/09/beating-sandvine-with-linux-iptables.html [blogspot.com]
    If you are running linux or a linux based router with iptables give this a try. My speeds returned to pre-sandvine levels.

    "If you are using a Red Hat Linux derivative, such as Fedora Core or CentOS, then you will want to edit /etc/sysconfig/iptables. First, make a backup of this file. Next, open this file in your favorite text editor. Replace the current contents with this, substituting 6883 with your BitTorrent port number:

    *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0]
    -A INPUT -i lo -j ACCEPT
    #Comcast BitTorrent seeding block workaround
    -A INPUT -p tcp --dport 6883 --tcp-flags RST RST -j DROP
    -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    #BitTorrent
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 6883 -j ACCEPT
    -A INPUT -m state --state NEW -m udp -p udp --dport 6883 -j ACCEPT
    -A INPUT -j REJECT --reject-with icmp-host-prohibited
    COMMIT

    Reload your iptables firewall with service iptables restart. You should now see a great improvement in your seeding.

    If you are using Ubuntu or another non-Red Hat Linux derivative, then place the following in a file and execute that file as root.

    #!/bin/sh
    #Replace 6883 with you BT port
    BT_PORT=6883

    #Flush the filters
    iptables -F

    #Apply new filters
    iptables -A INPUT -i lo -j ACCEPT
    #Comcast BitTorrent seeding block workaround
    iptables -A INPUT -p tcp --dport $BT_PORT --tcp-flags RST RST -j DROP
    iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    #BitTorrent
    iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport $BT_PORT -j ACCEPT
    iptables -A INPUT -m state --state NEW -m udp -p udp --dport $BT_PORT -j ACCEPT
    iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited

    Your firewall is now configured and you should have great upload speed now. You will have to run this script every boot, by the way. One easy way is to call the script at the end of /etc/rc.local."

    1. Re:Beating Sandvine by Anonymous Coward · · Score: 3, Informative

      This doesn't work. Sandvine sends RST to both sides of the connection, so even if you drop the packet the other end most likely will see it and end the connection.

  2. Re:What the fuck is 'churning'? by Zerth · · Score: 3, Informative

    Churn is an industry term for the percentage of your users will leave for somebody else and the percentage of their users that leave for you. Frequently these users are the same damn people swapping back and forth.

    So despite gaining and losing lots of users, everyone's base stays roughly the same, like a churning ocean, but each one of those churners costs you $X every time they switch sides(freebies, paperwork, number portability, etc).

    Apparently this is now the superlative of "discontinuing service", i.e. "you guys suck, I'm leaving for your competitor."

  3. Re:How about selling what you have? by Wildclaw · · Score: 3, Informative

    http://www.dslreports.com/shownews/Cogent-McBandwidth-Gets-Cheaper-95203/

    $7/mbit (of course talking about decent volumes here with the cheapest provider and I guess with fiber already in the ground)

    However that should give you a clue how much everyone is overcharging everywhere. The expensive part is the digging, but it is good (money earning) business to charge big money for small traffic volumes on lines that in reality could support far higher volumes. Not to mention how inefficent a big part of the industry is.

    Atleast that is the only way I can explain how some countries are managing to supply such nice bandwidth to their citizens without getting economically ruined.

  4. Re:Churn is nothing new by IgnoramusMaximus · · Score: 3, Informative

    That's the dumbest term I've heard since people calling single enemies "mobs" in online games

    That's MOBs for you, not "mobs". It is an ancient MUD game engine acronym which stands for "Mobile OBject". One of those archaic game lingo terms which still survives but the origins of which most of the young whipper-snappers do not have clue about.

    Now about that lawn of mine ...