download big files

[kp-tkr2014]

Hi,
When I am downloading files  from internet , it is taking very long time .
In the speed test it shows there are enough bandwidth . 
How can I figure out the problem ( ISP or the asa  fw ) 

till the firewall latency look like normal . 

How can I troubleshoot 
Please help 
 
Thanks

[balaji.bandi]

it depends on where the file you downloading, there may be restriction of far end download ?

is the same case with other site ( like all download slow ?)

what is the device you are using to connect, what speed connection you have from ISP.

what is speed test shows(post the screen shot), what is the file trasfer show screen shot for reference.

checks to be done :

1. check port negotiations.

2. post the configuration ( also check MTU)

3. by pass the ASA and connect directly PC to ISP and download ( what is the results ?)

[kp-tkr2014]

Hi,

interface status are here 

------------------ show interface ------------------

Interface GigabitEthernet0/0 "", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)

Input flow control is unsupported, output flow control is unsupported

Available but not configured via nameif

MAC address  a493.4c7e.7545, MTU not set

IP address unassigned

8497641709 packets input, 9447440418003 bytes, 0 no buffer

Received 30172858 broadcasts, 0 runts, 0 giants

206621 input errors, 0 CRC, 0 frame, 206621 overrun, 0 ignored, 0 abort

25977229 L2 decode drops

5480209822 packets output, 1302116067437 bytes, 0 underruns

0 pause output, 0 resume output

0 output errors, 0 collisions, 3 interface resets

0 late collisions, 0 deferred

0 input reset drops, 0 output reset drops, 0 tx hangs

input queue (blocks free curr/low): hardware (255/230)

output queue (blocks free curr/low): hardware (255/0)

  Control Point Interface States:

Interface number is 3

Interface config status is active

Interface state is active

Interface GigabitEthernet0/0.105 "Internet", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

VLAN identifier 105

MAC address a44c.1177.2369, MTU 1500

IP address 1.1.1.1  subnet mask 255.255.255.248

  Traffic Statistics for "Internet":

8471122558 packets input, 9256779242352 bytes

5480209822 packets output, 1179778213235 bytes

290766408 packets dropped

  Control Point Interface States:

Interface number is 13

Interface config status is active

Interface state is active

  Control Point Vlan105 States:

Interface vlan config status is active

Interface vlan state is UP

Interface GigabitEthernet0/1 "", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)

Input flow control is unsupported, output flow control is unsupported

Available but not configured via nameif

MAC address a493.4c7e.7546, MTU not set

IP address unassigned

5380264962 packets input, 1247028575884 bytes, 0 no buffer

Received 27 broadcasts, 0 runts, 0 giants

1704 input errors, 0 CRC, 0 frame, 1704 overrun, 0 ignored, 0 abort

0 L2 decode drops

8068968551 packets output, 9360552379408 bytes, 0 underruns

0 pause output, 0 resume output

0 output errors, 0 collisions, 3 interface resets

0 late collisions, 0 deferred

0 input reset drops, 0 output reset drops, 0 tx hangs

input queue (blocks free curr/low): hardware (255/230)

output queue (blocks free curr/low): hardware (255/46)

  Control Point Interface States:

Interface number is 4

Interface config status is active

Interface state is active

Interface GigabitEthernet0/1.107 "inside", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

VLAN identifier 907

MAC address a44c.1177.2360, MTU 1500

IP address 172.16.10.10, subnet mask 255.255.255.0

  Traffic Statistics for "inside":

5377656312 packets input, 1121237217583 bytes

8066601511 packets output, 9182495243464 bytes

14616500 packets dropped

  Control Point Interface States:

Interface number is 12

Interface config status is active

Interface state is active

  Control Point Vlan907 States:

Interface vlan config status is active

Interface vlan state is UP

Interface GigabitEthernet0/1.208 “DMZ”, is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

VLAN identifier 208

MAC address a44c.1177.2360, MTU 1500

IP address 172.16.1.5, subnet mask 255.255.255.0

  Traffic Statistics for “DMZ”:

2608479 packets input, 2104114840 bytes

2367040 packets output, 179853859 bytes

5857 packets dropped

  Control Point Interface States:

Interface number is 11

Interface config status is active

Interface state is active

  Control Point Vlan208 States:

Interface vlan config status is active

Interface vlan state is UP

IInterface Internal-Control0/0 "cplane", is up, line protocol is up

  Hardware is i82557, BW 100 Mbps, DLY 100 usec

(Full-duplex), (100 Mbps)

Input flow control is unsupported, output flow control is unsupported

MAC address 0000.0001.0001, MTU 1500

IP address 127.0.1.1, subnet mask 255.255.0.0

67767627 packets input, 10730109862 bytes, 0 no buffer

Received 915112 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

81493730 packets output, 5910539642 bytes, 0 underruns

0 pause output, 0 resume output

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collisions, 0 deferred

0 lost carrier, 0 no carrier

0 input reset drops, 0 output reset drops

input queue (curr/max packets): hardware (0/1) software (0/16)

output queue (curr/max packets): hardware (0/29) software (0/1)

  Traffic Statistics for "cplane":

0 packets input, 0 bytes

0 packets output, 0 bytes

0 packets dropped

      1 minute input rate 0 pkts/sec,  0 bytes/sec

      1 minute output rate 0 pkts/sec,  0 bytes/sec

      1 minute drop rate, 0 pkts/sec

      5 minute input rate 0 pkts/sec,  0 bytes/sec

      5 minute output rate 0 pkts/sec,  0 bytes/sec

      5 minute drop rate, 0 pkts/sec

  Control Point Interface States:

Interface number is 9

Interface config status is active

Interface state is active

Interface Internal-Data0/0 "", is up, line protocol is up

  Hardware is i82547GI rev00, BW 1000 Mbps, DLY 10 usec

(Full-duplex), (1000 Mbps)

Input flow control is unsupported, output flow control is unsupported

MAC address 0000.0001.0002, MTU not set

IP address unassigned

109110769 packets input, 8947082976 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

0 L2 decode drops

109110772 packets output, 8947083304 bytes, 0 underruns

0 pause output, 0 resume output

0 output errors, 0 collisions, 0 interface resets

0 late collisions, 0 deferred

0 input reset drops, 0 output reset drops

input queue (blocks free curr/low): hardware (255/254)

output queue (blocks free curr/low): hardware (255/254)

  Control Point Interface States:

Interface number is 8

Interface config status is active

Interface state is active

is the same case with other site ( like all download slow ?) 

yes 

what is the device you are using to connect, what speed connection you have from ISP

20 Mb Burst Size 30 Mb 

file transfer  varies at different  time 

from 500 Kb to 2 Mb

what is speed test shows(post the screen shot), what is the file trasfer show screen shot for reference.

That time speed test shows  7 Mb

Thanks 

[balaji.bandi]

is the result posted going through ASA or Directly connected internet ?

[kp-tkr2014]

Hi,
The result is through asa . asa installed in far remote location . So bypassing is not easy .
Thanks

[balaji.bandi]

how are you connect to that network and transfering files, it bit confused here ? can you explain more.

also possible can you post network diagram and asa configuration to help.

[kp-tkr2014]

Hi,
here is my topology
lan --------------ASA--------Internet router .
The file is located in internet . (ubuntu mirror they have 4 gb upload speed .)
I am downloading from lan .
What I mean asa in remote location ( it is located in isp's datacenter as a service )

Thanks

[balaji.bandi]

lan --------------ASA--------Internet router .

If ASA in remote DC, how is that streached to Your LAN ? what mode of connectivity and what speed ?

or your LAN in DC same Colo ?

[kp-tkr2014]

Hi,

LAN not stretched, there is l3 connectivity from the campus remote dc , it is fiber and 1G

Thanks