From owner-freebsd-net@FreeBSD.ORG Wed Jan 19 02:44:52 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9B6B3106564A for ; Wed, 19 Jan 2011 02:44:52 +0000 (UTC) (envelope-from ticso@cicely7.cicely.de) Received: from raven.bwct.de (raven.bwct.de [85.159.14.73]) by mx1.freebsd.org (Postfix) with ESMTP id 2D6658FC0C for ; Wed, 19 Jan 2011 02:44:51 +0000 (UTC) Received: from mail.cicely.de ([10.1.1.37]) by raven.bwct.de (8.13.4/8.13.4) with ESMTP id p0J2imZG098645 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 19 Jan 2011 03:44:48 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: from cicely7.cicely.de (cicely7.cicely.de [10.1.1.9]) by mail.cicely.de (8.14.4/8.14.4) with ESMTP id p0J2iVqP073988 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 19 Jan 2011 03:44:31 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: from cicely7.cicely.de (localhost [127.0.0.1]) by cicely7.cicely.de (8.14.2/8.14.2) with ESMTP id p0J2iVGQ098333; Wed, 19 Jan 2011 03:44:31 +0100 (CET) (envelope-from ticso@cicely7.cicely.de) Received: (from ticso@localhost) by cicely7.cicely.de (8.14.2/8.14.2/Submit) id p0J2iV5E098332; Wed, 19 Jan 2011 03:44:31 +0100 (CET) (envelope-from ticso) Date: Wed, 19 Jan 2011 03:44:31 +0100 From: Bernd Walter To: freebsd-net@freebsd.org Message-ID: <20110119024431.GC39356@cicely7.cicely.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Operating-System: FreeBSD cicely7.cicely.de 7.0-STABLE i386 User-Agent: Mutt/1.5.11 X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED=-1, BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01 autolearn=unavailable version=3.3.0 X-Spam-Checker-Version: SpamAssassin 3.3.0 (2010-01-18) on spamd.cicely.de Cc: Bernd Walter Subject: strange netstat -ian output X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ticso@cicely.de List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Jan 2011 02:44:52 -0000 A given interface is configured: re0: flags=8a43 metric 0 mtu 1500 options=399b ether 00:01:08:00:79:92 inet 10.1.1.15 netmask 0xffffff00 broadcast 10.1.1.255 inet6 fe80::201:8ff:fe00:7992%re0 prefixlen 64 scopeid 0x1 inet6 2a02:21e0:16e0:2000::103 prefixlen 64 nd6 options=21 media: Ethernet autoselect (1000baseT ) status: active This is one of the blocks for this interface: re0 1500 2a02:21e0:16e 2a02:21e0:16e0:20 0 - - 1 - - ff02:1::2 (refs: 1) ff02:1::d (refs: 1) ff02:1::202 (refs: 1) ff02:1::1:ff00:103 (refs: 1) ff01:1::1 (refs: 1) ff02:1::2:6214:d648(refs: 1) ff02:1::1 (refs: 1) ff02:1::1:ff00:7992(refs: 1) 2a02:21e0:16e seems to be the truncated IP. The first line has 2a02:21e0:16e0:20 - I assume this should say 2a02:21e0:16e0:2000::103, but it is truncated as well... Adding -W won't help on truncation. - ff02:1::2 is not just truncated - this obviously should be ff02::2. This '1' is part of every multicst address listed, although they don't belong there. By looking at systems with a large number of interfaces I came to the conclusion that this is the scope ID, but why is it listed as part of the IP? - ff02:1::d beside '1' it's Ok, since I've started pim6dd. - ff02:1::202 beside '1' it's Ok - according to IANA it's RPC. - ff02:1::1:ff00:103 also beside '1' it is the solicitated address for 2a02:21e0:16e0:2000::103 so it's otherwise Ok - ff01:1::1 again '1' - otherwise Ok - ff02:1::2:6214:d648 What's this? From watching at the MLD packets I know that it is ff02::2:6214:d648 and that every host has such a beast on each interface, but each host has different 32bit at the end. Although the IP says that this would be an IANA assigned address it is not listed in: http://www.iana.org/assignments/ipv6-multicast-addresses/ipv6-multicast-addresses.xml - ff02:1::1 again '1' - otherwise Ok - ff02:1::1:ff00:7992 again '1', and it seems to be the solicitated address for a stateless configured address - likely fe80::201:8ff:fe00:7992. Why is this part of the 2a02:21e0:16e block? A bit stranger is the part for the link-local address: re0 1500 fe80:1::201:8 fe80:1::201:8ff:f 0 - - 759 - - ff02:1::2 (refs: 1) ff02:1::d (refs: 1) ff02:1::202 (refs: 1) ff02:1::1:ff00:103 (refs: 1) ff01:1::1 (refs: 1) ff02:1::2:6214:d648(refs: 1) ff02:1::1 (refs: 1) ff02:1::1:ff00:7992(refs: 1) In this case even the IP is not only truncated, it also has the excessive '1'. Well - it's a scoped address, but it doesn't belong inside the IP. And similar to the unicast address it has all solicitated addresses listed. -- B.Walter http://www.bwct.de Modbus/TCP Ethernet I/O Baugruppen, ARM basierte FreeBSD Rechner uvm.