Subject: Re: NetBSD PPP
To: wb2oyc <WB2OYC@BELLATLANTIC.NET>
From: Colin Wood <cwood@ichips.intel.com>
List: port-mac68k
Date: 12/03/1997 21:34:23
wb2oyc wrote:
> >> I'd like to ask a question regarding PPP myself, and that is, I see
> >> some process fill the link with traffic as soon as I try to do anything
> >> across it (telnet, netstat, anything).  It kills the performance and it
> >> never seems to stop!  I thought it was routed, and I still suspect its
> >> advertising its routes, or whatever it does.  But, I killed it, and it
> >> still persists.  Is the kernel doing this because it sees the two possible
> >> networks (my ethernet and now the network to which I'm connecting)?
> >
> >Please check exactly which program it is.
> >
> Yeah, but ps aux doesn't tell me that anything is there, thats whats so
> puzzling about what it is!

try 'ps -gauwwx'
 
> >I doubt you need to run routed. Kill it, and edit /etc/rc.conf to not
> >start it.
> 
> That was my 1st thought and it was initially there.  I have set rc.conf
> so that it won't run, ever again!  :)  But that wasn't it...Do you think
> it could be the LCP processes talking back and forth for some reason? 
> Or something else that is an integral part of ppp?
> 
> I can't imagine what it would be, and this service is used by various
> other machines running different OS's and their PPP implementations.
> I haven't seen this behavior when connecting to this same service with
> any of them.  Thats  part of what makes it such a puzzle, for me anyway.

Have you tried running tcpdump on ppp0 yet?  All you should have to do is:

tcpdump -i ppp0

assuming you have the bpf devices created (if not, do a "cd /dev;
sh MAKEDEV all" as root).

The tcpdump program should show you what's going over the link...

Later.

-- 
Colin Wood                                 cwood@ichips.intel.com
Component Design Engineer - MD6                 Intel Corporation
-----------------------------------------------------------------
I speak only on my own behalf, not for my employer.