Date: Tue, 7 Jul 1998 15:58:17 -0500 From: NOC-IPAD <sysadmin@greeves.mfn.org> To: NOC-IPAD <sysadmin@greeves.mfn.org>, "'FREEBSD-QUESTIONS@FREEBSD.ORG'" <FREEBSD-QUESTIONS@FreeBSD.ORG>, "'Greg Lehey'" <grog@lemis.com> Subject: RE: Network errors (was: Homesick Nameserver...) Message-ID: <01BDA9C0.0F370180@noc.mfn.org>
next in thread | raw e-mail | index | archive | help
Heres the output of netstat/ifconfig. While doing this, I just realized
that there is *one* other unique thing about this particular host:
it is the *only* one I have that answers to more than one address.
Obviously, there is a high probability of a correlation here...
As you can see, these machine all live outside the firewall, on their
own segment. None of the internal machines have privileged access
to them (they are not mounting or being mounted by machines not
on their own segment).
Thanks for any input on this (although I am going to try and kill
the ip alias just to see what happens)...
J.A. Terranson
sysadmin@mfn.org
# netstat -i
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
ed0 1500 <Link> 00.00.c0.03.fd.54 68942 0 47714 0 28
ed0 1500 mfn.org ns1 68942 0 47714 0 28
ed0 1500 www/32 www 68942 0 47714 0 28
lp0* 1500 <Link> 0 0 0 0 0
tun0* 1500 <Link> 0 0 0 0 0
sl0* 552 <Link> 0 0 0 0 0
lo0 16384 <Link> 1014 0 1014 0 0
lo0 16384 localhost localhost 1014 0 1014 0 0
#
-----------------------------------------------------------------------------------------------------------------
# netstat -r
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default sebastion UGSc 25 1189 ed0
localhost localhost UH 0 0 lo0
mfn.org link#1 UC 0 0
sebastion link#1 UHLW 26 64
greeves 0:0:c0:d1:ef:4a UHLW 14 40677 ed0 1073
ns1 0:0:c0:3:fd:54 UHLW 2 270 lo0
www 0:0:c0:3:fd:54 UHLW 0 764 lo0 =>
www/32 link#1 UC 0 0
slowbob 0:4f:49:0:fd:88 UHLW 0 37 ed0 1002
noc 0:40:f6:84:ec:7b UHLW 1 164 ed0 932
204.238.179.255 ff:ff:ff:ff:ff:ff UHLWb 1 771 ed0
#
----------------------------------------------------------------------------------------------------------
# ifconfig -a
ed0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 204.238.179.6 netmask 0xffffff00 broadcast 204.238.179.255
inet 204.238.179.7 netmask 0xffffffff broadcast 204.238.179.7
ether 00:00:c0:03:fd:54
lp0: flags=8810<POINTOPOINT,SIMPLEX,MULTICAST> mtu 1500
tun0: flags=8010<POINTOPOINT,MULTICAST> mtu 1500
sl0: flags=c010<POINTOPOINT,LINK2,MULTICAST> mtu 552
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet 127.0.0.1 netmask 0xff000000
#
----------------------------------------------------------------------------------------------------------
----------
From: Greg Lehey
Sent: Monday, July 06, 1998 8:50 PM
To: NOC-IPAD; 'FREEBSD-QUESTIONS@FREEBSD.ORG'
Subject: Network errors (was: Homesick Nameserver...)
On Monday, 6 July 1998 at 10:06:06 -0500, NOC-IPAD wrote:
> Hey, How's everyone doing? Doug, you awake for this one?
> Greg, Julian, You paying attention? I have *the* strange story
> of the decade for you...
>
> We set up a new backup system here over the weekend, using
> a universally mounted NFS/SAMBA solution. Really neat. And
> it works great. I can back up the entire network in under an hour,
> seven days a week! But, I digress..
>
> Every machine on the network mounts this 4g partition, and does
> a dump to it. So, to make life easier, we of course put this mount
> into each hosts fstab. No problems on any of them, *except* for
> our "homesick" nameserver. Nevertheless, here is what the line
> looks like (in *every* host):
>
> greeves:/backup /backup nfs rw 2 2
>
> So, back to our problem. When boot time comes around, this
> *one* machine:
>
> (a) complains about an RPC timeout, and will do it forever unless
> stopped with a control-c (obviously, aborting the /backup mount),
>
> and
>
> (b) attempts to send approximately 500 (yes, that's five _hundred_)
> "Network Unreachable" messages to 204.216.27.18 - "hub.freebsd.org"!
>
> At first (until I looked up the IP addy) I thought this machine had been
> compromised, and was sending a notice to it's new "owner". I am about
> at the point of being ready to just reload this guy and call it a day,
> but before I do, anyone have any ideas???
Let's see the output of netstat -i, netstat -r and ifconfig -a.
Greg
--
See complete headers for address and phone numbers
finger grog@lemis.com for PGP public key
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01BDA9C0.0F370180>