Date: Sat, 20 Oct 2001 22:13:47 -0400 From: "Jonathan M. Slivko" <jslivko@4evermail.com> To: "'Jim Weeks'" <jim@siteplus.net> Cc: <freebsd-isp@FreeBSD.ORG> Subject: RE: arplookup failed: Message-ID: <002501c159d6$05139f50$6501a8c0@sioux> In-Reply-To: <Pine.BSF.4.21.0110202209001.816-100000@veager.jwweeks.com>
next in thread | previous in thread | raw e-mail | index | archive | help
I think tcpdump does the same thing as trafshow, essentially. As far as promiscuous mode surviving a hot boot, I have no idea. Someone else on the list might be better suited to answer that question. -- Jonathan --------------------------------------------------- Jonathan Slivko - 4EverMail.COM - www.4evermail.com Web Hosting - Web Desgin - UNIX Shell Accounts JSlivko@4evermail.com - Phone: (212) 663-1109 -----Original Message----- From: owner-freebsd-isp@FreeBSD.ORG [mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of Jim Weeks Sent: Saturday, October 20, 2001 10:12 PM To: Jonathan M. Slivko Cc: freebsd-isp@FreeBSD.ORG Subject: RE: arplookup failed: Thats entirely possible. I think I did run trafshow which would do that, but I am pretty sure the machine has been rebooted since doing so. Promiscuous mode wouldn't survive a hot boot would it? -- Jim Weeks On Sat, 20 Oct 2001, Jonathan M. Slivko wrote: > Jim, > > What you may have done is you may have set your NIC card into > promiscuous mode, which tells the NIC card to intercept all packets on > that network, not just the ones meant for that particular machine. What > you may have seen could have been a result of that. -- Jonathan > > --------------------------------------------------- > Jonathan Slivko - 4EverMail.COM - www.4evermail.com > Web Hosting - Web Desgin - UNIX Shell Accounts > JSlivko@4evermail.com - Phone: (212) 663-1109 > > -----Original Message----- > From: owner-freebsd-isp@FreeBSD.ORG > [mailto:owner-freebsd-isp@FreeBSD.ORG] On Behalf Of Jim Weeks > Sent: Saturday, October 20, 2001 9:53 PM > To: freebsd-isp@freebsd.org > Subject: arplookup failed: > > Would someone please check me on this. I know this has been discussed > before and I want to make sure I understand correctly. > > I am receiving the following error, > > Oct 20 21:16:21 server /kernel: arplookup XXX.XXX.XXX.XXX failed: host > is > not on local network > > Indeed the server issuing the request is not on the same subnet. If I > understand arp correctly, the kernel is not able to respond to a mac > address not directly connected to the subnet of the responding machine. > > After looking at the results of "tcpdump -n -e -p arp", I see a lot of > traffic from several subnets. Should I be seeing arp requests other > than > those initiated by my default gateway or other machines on the same > subnet? > > Why would this machine be issuing request for interfaces connected to a > different subnet, and if it should, why isn't it directing the requests > to my default gateway? > > Am I correct in assuming that this is a routing problem and not > something > I can correct from my end? > > Thanks in advance, > > -- > Jim Weeks > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002501c159d6$05139f50$6501a8c0>