From owner-freebsd-net@FreeBSD.ORG Thu Jun 5 09:09:47 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 88282106564A for ; Thu, 5 Jun 2008 09:09:47 +0000 (UTC) (envelope-from zuan@mylinux.net.my) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.239]) by mx1.freebsd.org (Postfix) with ESMTP id 5DC478FC16 for ; Thu, 5 Jun 2008 09:09:47 +0000 (UTC) (envelope-from zuan@mylinux.net.my) Received: by rv-out-0506.google.com with SMTP id b25so640628rvf.43 for ; Thu, 05 Jun 2008 02:09:47 -0700 (PDT) Received: by 10.141.141.3 with SMTP id t3mr676070rvn.213.1212656986852; Thu, 05 Jun 2008 02:09:46 -0700 (PDT) Received: by 10.140.148.6 with HTTP; Thu, 5 Jun 2008 02:09:46 -0700 (PDT) Message-ID: Date: Thu, 5 Jun 2008 17:09:46 +0800 From: "Izwan Mohd" To: freebsd-net@freebsd.org In-Reply-To: MIME-Version: 1.0 References: <20080604194059.GE1028@server.vk2pj.dyndns.org> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: network keep droping X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Jun 2008 09:09:47 -0000 Update: just got back from the remote site and checked the following: 1. tcpdump on the interface only show switch broadcast nothing more 2. the connection restored by doing arp -ad && ping On Thu, Jun 5, 2008 at 12:27 PM, Izwan Mohd wrote: > > First question would be: What has changed? >> >> Are you able to identify when the problem occurs? This might let you >> associate the problem with an internal cronjob or network activity. > > > it randomly happen so I can't determine when it happen my cron script just > try to ping and if it not successfull it will flush and restart the network > >> >> What does ifconfig report? Does the interface look normal or is it >> reporting something strange? > > > ifconfig does not show any abnormality but maybe I will double check it > > Is the switch reporting any events associated with your port? >> > > Nope no report from switch indicating something wrong the the port that > the machine are using > > >> What do you see if you tcpdump the interface whilst its not working? >> Are you seeing normal subnet broadcast traffic? Unicast traffic >> directed to your box? Outgoing traffic from your box? >> > > I will check this one this afternoon because the machine is dead again > I'll post the finding later on > > >> >> Does physically unplugging and re-connecting the network cable >> correct the problem? Are you able to (temporarily) use a different >> swichport or NIC? >> > > sometime it does sometime it wont, already try changing to other port on > the switch still the same, changing the NIC is not an option for me because > it a rack mount server using on board NIC and no extra slot to add a new > network card on it. > > >> Finally, more detail on your configuration might trigger someone's >> memory: What version of 6.x? What NIC/MII? How much memory? What >> network features (vlan, firewall, dummynet, netgraph, carp, ...) are >> you using? >> > > The server using FreeBSD 6.0-RELEASE the NIC is intel i can't remember the > model but freebsd detect it as "em0" the server memory is 1GB, not special > network fetures it only running snort and nessus > > will post more detail after I check the machine this afternoon > > Thank You, > > Regards, > Zuan > >> >> -- >> Peter Jeremy >> Please excuse any delays as the result of my ISP's inability to implement >> an MTA that is either RFC2821-compliant or matches their claimed >> behaviour. >> >