Subject: netstat -nr
To: None <current-users@NetBSD.ORG>
From: C Kane <ckane@best.com>
List: current-users
Date: 09/24/1997 11:58:31
Hello.

This is not really a current-users question, but it's close and I don't
know where else to send it.

This NetBSD-1.2G/i386 system has four ethernet segments,
plus a default route.  After a day, 'netstat -nr' reports
the following:

> Internet:
> Destination        Gateway            Flags     Refs     Use    Mtu  Interface
> default            143.183.48.251     UGS         4    66035      -  de1
> 127.0.0.1          127.0.0.1          UH          2      315      -  lo0
> 143.183.31/24      143.183.50.2       UG          0        0      -  de3
> 143.183.32/22      143.183.50.2       UG          0        0      -  de3
> 143.183.36/23      143.183.50.2       UG          0        0      -  de3
> 143.183.38/24      143.183.50.2       UG          0        0      -  de3
> 143.183.43/24      143.183.50.2       UG          0        0      -  de3
> 143.183.44/23      143.183.50.2       UG          0        0      -  de3
> 143.183.46/24      143.183.50.2       UG          0        0      -  de3
> 143.183.47/24      link#1             UC          0        0      -  de0
> 143.183.48/24      link#2             UC          0        0      -  de1
> 143.183.49/24      link#3             UC          0        0      -  de2
> 143.183.50/24      link#4             UC          0        0      -  de3
> 143.183.50.2       link#4             UHL         7        0      -  de3

[I have deleted many entries with host IP and MAC addresses.]

It is normal for the "Use" counts of each of the four NICs to be zero, yes?
I've not seen that on other systems' 'netstat' reports, but they don't have
the "C" flags either.

What I'm really curious about is what might have added all those routes
from 143.183.* via gateway 143.183.50.2?  System 143.183.50.2 is a server
which is highly connected, but should not be doing any routing.  Is this
netstat report trying to tell me that packets to all of those other
segments really are going through 143.183.50.2?

Thanks for any help or pointers.

-- Chuck