From owner-freebsd-questions Tue Jul 7 13:57:37 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA02926 for freebsd-questions-outgoing; Tue, 7 Jul 1998 13:57:37 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from greeves.mfn.org (greeves.mfn.org [204.238.179.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA02891 for ; Tue, 7 Jul 1998 13:57:28 -0700 (PDT) (envelope-from sysadmin@greeves.mfn.org) Received: from noc.mfn.org (noc.mfn.org [204.238.179.35]) by greeves.mfn.org (8.8.7/8.8.7) with SMTP id PAA02914; Tue, 7 Jul 1998 15:57:27 -0500 (CDT) (envelope-from sysadmin@greeves.mfn.org) Received: by noc.mfn.org with Microsoft Mail id <01BDA9C0.0F370180@noc.mfn.org>; Tue, 7 Jul 1998 15:58:19 -0500 Message-ID: <01BDA9C0.0F370180@noc.mfn.org> From: NOC-IPAD To: NOC-IPAD , "'FREEBSD-QUESTIONS@FREEBSD.ORG'" , "'Greg Lehey'" Subject: RE: Network errors (was: Homesick Nameserver...) Date: Tue, 7 Jul 1998 15:58:17 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id NAA02895 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Heres the output of netstat/ifconfig. While doing this, I just realized that there is *one* other unique thing about this particular host: it is the *only* one I have that answers to more than one address. Obviously, there is a high probability of a correlation here... As you can see, these machine all live outside the firewall, on their own segment. None of the internal machines have privileged access to them (they are not mounting or being mounted by machines not on their own segment). Thanks for any input on this (although I am going to try and kill the ip alias just to see what happens)... J.A. Terranson sysadmin@mfn.org # netstat -i Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll ed0 1500 00.00.c0.03.fd.54 68942 0 47714 0 28 ed0 1500 mfn.org ns1 68942 0 47714 0 28 ed0 1500 www/32 www 68942 0 47714 0 28 lp0* 1500 0 0 0 0 0 tun0* 1500 0 0 0 0 0 sl0* 552 0 0 0 0 0 lo0 16384 1014 0 1014 0 0 lo0 16384 localhost localhost 1014 0 1014 0 0 # ----------------------------------------------------------------------------------------------------------------- # netstat -r Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default sebastion UGSc 25 1189 ed0 localhost localhost UH 0 0 lo0 mfn.org link#1 UC 0 0 sebastion link#1 UHLW 26 64 greeves 0:0:c0:d1:ef:4a UHLW 14 40677 ed0 1073 ns1 0:0:c0:3:fd:54 UHLW 2 270 lo0 www 0:0:c0:3:fd:54 UHLW 0 764 lo0 => www/32 link#1 UC 0 0 slowbob 0:4f:49:0:fd:88 UHLW 0 37 ed0 1002 noc 0:40:f6:84:ec:7b UHLW 1 164 ed0 932 204.238.179.255 ff:ff:ff:ff:ff:ff UHLWb 1 771 ed0 # ---------------------------------------------------------------------------------------------------------- # ifconfig -a ed0: flags=8843 mtu 1500 inet 204.238.179.6 netmask 0xffffff00 broadcast 204.238.179.255 inet 204.238.179.7 netmask 0xffffffff broadcast 204.238.179.7 ether 00:00:c0:03:fd:54 lp0: flags=8810 mtu 1500 tun0: flags=8010 mtu 1500 sl0: flags=c010 mtu 552 lo0: flags=8049 mtu 16384 inet 127.0.0.1 netmask 0xff000000 # ---------------------------------------------------------------------------------------------------------- ---------- From: Greg Lehey Sent: Monday, July 06, 1998 8:50 PM To: NOC-IPAD; 'FREEBSD-QUESTIONS@FREEBSD.ORG' Subject: Network errors (was: Homesick Nameserver...) On Monday, 6 July 1998 at 10:06:06 -0500, NOC-IPAD wrote: > Hey, How's everyone doing? Doug, you awake for this one? > Greg, Julian, You paying attention? I have *the* strange story > of the decade for you... > > We set up a new backup system here over the weekend, using > a universally mounted NFS/SAMBA solution. Really neat. And > it works great. I can back up the entire network in under an hour, > seven days a week! But, I digress.. > > Every machine on the network mounts this 4g partition, and does > a dump to it. So, to make life easier, we of course put this mount > into each hosts fstab. No problems on any of them, *except* for > our "homesick" nameserver. Nevertheless, here is what the line > looks like (in *every* host): > > greeves:/backup /backup nfs rw 2 2 > > So, back to our problem. When boot time comes around, this > *one* machine: > > (a) complains about an RPC timeout, and will do it forever unless > stopped with a control-c (obviously, aborting the /backup mount), > > and > > (b) attempts to send approximately 500 (yes, that's five _hundred_) > "Network Unreachable" messages to 204.216.27.18 - "hub.freebsd.org"! > > At first (until I looked up the IP addy) I thought this machine had been > compromised, and was sending a notice to it's new "owner". I am about > at the point of being ready to just reload this guy and call it a day, > but before I do, anyone have any ideas??? Let's see the output of netstat -i, netstat -r and ifconfig -a. Greg -- See complete headers for address and phone numbers finger grog@lemis.com for PGP public key To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message