Subject: Re: frozen networking with libpcap-0.9.3nb3
To: Greg Troxel <gdt@ir.bbn.com>
From: Jeremy C. Reed <reed@reedmedia.net>
List: tech-net
Date: 10/12/2005 13:29:12
Before I send-pr, some more notes:
On Tue, 11 Oct 2005, Greg Troxel wrote:
> Check outgoing traffic via tcpdump on another machine. Probably
> it's there, but if not that's interesting.
tcpdump on another machine shows traffic going both ways even when
network appears to be down:
13:09:57.479987 IP rainier > pilchuck: icmp 64: echo request seq 59
13:09:57.480170 IP pilchuck > rainier: icmp 64: echo reply seq 59
(rainier is the host with the problem.)
> Run 'netstat -ain' to see what multicast groups are joined.
No change whether I am running tcpdump or not.
netstat -ain output (but just tlp):
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs
Colls
tlp0 1500 <Link> 00:a0:cc:24:2d:40 1750619 0 638304 1 5512
tlp0 1500 fe80::/64 fe80::2a0:ccff:fe
ff02::202%tlp0
ff02::2:51:3495%t
ff02::1%tlp0
ff02::1:ff24:2d40 1750619 0 638304 1
5512
tlp0 1500 192.168/24 192.168.0.2 1750619 0 638304 1 5512
> With the system in the broken state, try tcpdump (instead of
> trafshow) w/o -p. capture ifconfig; it should show PROMISCOUS but
> not ALLMULTI. capture netstat -ain.
netstat -ain doesn't change.
With tcpdump not running (and my networking is down):
tlp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
With tcpdump running (and now my networking works again):
tlp0: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST> mtu 1500
> Reboot, but don't power cycle. Don't start trafshow or ntcpdump.
> Does it work, or is it still in the no-packets-received state?
...
I didn't get to the rest of this yet. I didn't reboot yet as I am using
the system :)
Jeremy C. Reed
BSD News, BSD tutorials, BSD links
http://www.bsdnewsletter.com/