From owner-freebsd-isp  Sat Oct 20 19:57:16 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from femail4.sdc1.sfba.home.com (femail4.sdc1.sfba.home.com [24.0.95.84])
	by hub.freebsd.org (Postfix) with ESMTP id E3C4B37B401
	for <freebsd-isp@FreeBSD.ORG>; Sat, 20 Oct 2001 19:57:13 -0700 (PDT)
Received: from veager.jwweeks.com ([65.14.122.116])
          by femail4.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20011021025713.RKSZ571.femail4.sdc1.sfba.home.com@veager.jwweeks.com>;
          Sat, 20 Oct 2001 19:57:13 -0700
Date: Sat, 20 Oct 2001 22:57:12 -0400 (EDT)
From: Jim Weeks <jim@siteplus.net>
X-Sender: jim@veager.jwweeks.com
To: Rowan Crowe <rowan@sensation.net.au>
Cc: freebsd-isp@FreeBSD.ORG
Subject: Re: arplookup failed:
In-Reply-To: <Pine.BSF.4.21.0110211248480.36258-100000@velvet.sensation.net.au>
Message-ID: <Pine.BSF.4.21.0110202255160.961-100000@veager.jwweeks.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

Ok, thats what I thought you meant.  No, I can login to the offending
machine to do the trace, I'll try your idea.

Thanks,

--
Jim Weeks


On Sun, 21 Oct 2001, Rowan Crowe wrote:

> On Sat, 20 Oct 2001, Jim Weeks wrote:
> 
> > A traceroute from my server back to the offending machine travels through
> > my default gateway, which is how it should be, I think.  Or shouldn't the
> > trace also show the gateway for the offending machine?
> 
> Hello Jim,
> 
> Are you able to trace back from the other end? That's what I was getting
> at.
> 
> If you can't, then use tcpdump -e to compare ethernet addresses; see if
> the packets FROM the other server have the source ethernet address of your
> gateway. If not, then something is funny (like the host sending
> directly...)
> 
> Cheers.
> 
> 
> --
> Rowan Crowe
> camrecord.com / camdiscover.com / Sensation Internet Services
> Melbourne, Australia
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message