Re: Strange new behavior

From: Kasper Dupont (kasperd@daimi.au.dk)
Date: 12/29/02


From: Kasper Dupont <kasperd@daimi.au.dk>
Date: Sun, 29 Dec 2002 10:51:20 +0100

Paul wrote:
>
> Hello All,
>
> I just noticed one of my machines will no longer respond to echo requests
> unless tcpdump is running.

Sounds like the packets are not send with the right destination MAC
address. When you start tcpdump it will switch the interface into
promiscuous-mode. What happens if you use the -p option to tcpdump?

I cannot see why the echo request packets would be send with wrong
MAC address and all other packets with the right address.

>
> Has anyone ever seen this before? Any advice would be greatly appreciated.
> This machine has run for years with no problem. It appears to have
> "developed" this problem after a power failure a few days ago. Coincidence?
> Also unable to receive incoming mail, but outgoing works fine. Stumped....

Try finding out a little more about what works and what does not
work. Could it be that you accidentially have configured two
computers with the same IP address? How is the structure of the
network?

>
> O/S RH 5.2 with up to date security patches etc.

What kernel version is such a system using? 2.0.39?

-- 
Kasper Dupont -- der bruger for meget tid på usenet.
For sending spam use mailto:aaarep@daimi.au.dk
for(_=52;_;(_%5)||(_/=5),(_%5)&&(_-=2))putchar(_);


Relevant Pages

  • Re: ICMP Killed me and my machine
    ... Using tcpdump, find the source I.P address of who's ... hitting you and set up a rule using ipfw to block it. ... to 20 packets per second ... >> But i was down including all my machines.. ...
    (FreeBSD-Security)
  • Re: forwarding http requests with ipfw
    ... But I would like machines on the internal.freebsd.org network to query privatehost as if it was. ... When one of these machines queries privatehost I would like privatehost to forward those requests to my webserver, www.freebsd.org, so that it can handle the request. ... The problem I am having is that it seems the packets never leave privatehost. ... "ipfw show" shows that packets are matching my rule, but tcpdump never shows any packets going out to 216.136.204.117. ...
    (freebsd-questions)
  • Re: forwarding http requests with ipfw
    ... But I would like machines on the internal.freebsd.org network to query privatehost as if it was. ... The problem I am having is that it seems the packets never leave privatehost. ... "ipfw show" shows that packets are matching my rule, but tcpdump never shows any packets going out to 216.136.204.117. ...
    (freebsd-questions)
  • Re: forwarding http requests with ipfw
    ... But I would like machines on the internal.freebsd.org network to query privatehost as if it was. ... When one of these machines queries privatehost I would like privatehost to forward those requests to my webserver, www.freebsd.org, so that it can handle the request. ... The problem I am having is that it seems the packets never leave privatehost. ... "ipfw show" shows that packets are matching my rule, but tcpdump never shows any packets going out to 216.136.204.117. ...
    (freebsd-questions)
  • Re: forwarding http requests with ipfw
    ... But I would like machines on the internal.freebsd.org network to query privatehost as if it was. ... When one of these machines queries privatehost I would like privatehost to forward those requests to my webserver, www.freebsd.org, so that it can handle the request. ... The problem I am having is that it seems the packets never leave privatehost. ... "ipfw show" shows that packets are matching my rule, but tcpdump never shows any packets going out to 216.136.204.117. ...
    (freebsd-questions)