Date: Sun, 3 May 1998 03:09:40 -0700 (PDT) From: Julian Elischer <julian@whistle.com> To: Capriotti <capriotti@geocities.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: TCPDUMP results - ppp samba NT Message-ID: <Pine.BSF.3.95.980503030914.25840A-100000@current1.whistle.com> In-Reply-To: <3.0.32.19980503013051.00c3d710@pop.mpc.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
I've forwarded this to the SAMBA guys ans this is more their stuff. On Sun, 3 May 1998, Capriotti wrote: > I'm posting this again, since there was no positive answer for it. Sorry. > > > Hello all. I have setup a 2.2.1 box with TCPDUMP working and started > listening to vx0 (3COm pci card) > > Allow me to give you a description of what is going on: > > Now I have 3 machines networked: > > 1 -2.2.1 box w/ TCPDUMP listening to network > 2 -2.2.5 box with [ppp -alias -auto mpc] and [Samba] > 3 -NT 4 worksatayion w/ Service pack 3 > > 2.2.1 machine is 150.150.150.129 > 2.2.5 box is 150.150.150.130 > NT W 4 box is 150.150.150.131 > > > I am ruiinig TCPDUMP from the 2.2.1 box 'cause I dont have 2.2.5 sources > here, so I can't listen to tun0 as it would be recommended. > > After some tests, I have found that enabeling the filters below would stop > ppp from dialing in many cases: > > set dfilter 2 deny udp src gt 49 > set dfilter 3 deny udp dst gt 49 > set dfilter 4 deny udp src lt 233 > set dfilter 5 deny udp dst lt 49 > > PPP dos not dial when NT is booting up. > > The result of tcpdump when NT is booting can be seen on file dump.txt > attached. > > > Now, when I try to browse the network, ppp starts dialing. > > Result of tcpdump when i try to browse the network (simply double clicking > the "Networtk Neighborhood" icon) can be seen on the dump2.txt file. > > Finally, dump3.txt shows a "Find Computer" operation looking for a computer > on the network. > > For me, those files show that UDP call are baing made, and that those ports > are being covered by the ppp filtering. > > Could someone take a look at those files and give me a couple of steps to > follow ? > > > One aditional fact: > > when setting up my network card, during the installation, I'v set the > Gateway and Name Server for the network 200.246.0.252, which are my ISP's > values for those. > > Is that correct, and can this be interfering ? > > If yes, what values should I put there ? > > > Thank you all !10:48:10.352636 150.150.150.130.netbios-dgm > > 150.150.150.255.netbios-dgm: udp 215 > 10:49:13.740596 arp who-has 150.150.150.131 tell 150.150.150.131 > 10:49:14.735299 arp who-has 150.150.150.131 tell 150.150.150.131 > 10:49:15.737235 arp who-has 150.150.150.131 tell 150.150.150.131 > 10:49:20.062498 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:20.807123 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:21.558492 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:22.309936 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:29.746648 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:30.495707 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:31.247140 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:31.998592 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:32.755065 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:32.781424 150.150.150.131.netbios-dgm > 150.150.150.255.netbios-dgm: > udp 201 > 10:49:33.501486 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:34.252927 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:35.004397 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:35.759361 150.150.150.131.netbios-dgm > 150.150.150.255.netbios-dgm: > udp 201 > 10:49:35.943205 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:36.054806 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:36.687624 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:36.797840 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:37.439068 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:37.549279 150.150.150.131.netbios-ns > 150.150.150.255..netbios-ns: > udp 68 > 10:49:38.190518 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:38.300730 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:39.053136 150.150.150.131.netbios-dgm > 150.150.150.255.netbios-dgm: > udp 178 > 10:49:39.054352 0:f4:0:e0:0:0 2:0:0:0:45:0 4011 248: > 1e6c 9696 9681 9696 96ff 008a 008a 00e0 > 10da 110a 0638 0000 0000 008a 00d8 0000 > 2045 4645 4a45 4f46 4446 4545 4645 4a45 > 4f43 4143 4143 > 10:49:39.054404 einstein.mpcnet.com.br.netbios-dgm > > 150.150.150.255.netbios-dgm: udp 216 > 10:49:39.055025 150.150.150.131.netbios-dgm > 150.150.150.255.netbios-dgm: > udp 201 > 10:49:39.055472 0:ed:0:e1:0:0 2:0:0:0:45:0 4011 241: > 1e72 9696 9681 9696 96ff 008a 008a 00d9 > e370 110a 0639 0000 0000 008a 00d1 0000 > 2045 4645 4a45 4f46 4446 4545 4645 4a45 > 4f43 4143 4143 > 10:49:39.055519 einstein.mpcnet.com.br.netbios-dgm > > 150.150.150.255.netbios-dgm: udp 209 > 10:49:49.167711 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:49.913192 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:50.664614 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:49:51.416052 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 68 > 10:50:21.458314 150.150.150.130.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:50:21.459280 einstein.mpcnet.com.br.netbios-ns > > 150.150.150.130.netbios-ns: udp 62 > 10:50:45.754746 150.150.150.131.netbios-dgm > 150.150.150.255.netbios-dgm: > udp 174 > 10:50:45.754826 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:50:45.756159 einstein.mpcnet.com.br.netbios-dgm > > 150.150.150.131.netbios-dgm: udp 183 > 10:50:45.822970 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:50:45.823977 einstein.mpcnet.com.br.netbios-ns > > 150.150.150.131.netbios-ns: udp 62 > 10:50:45.824484 arp who-has einstein.mpcnet.com.br tell 150.150.150..131 > 10:50:45.824604 arp reply einstein.mpcnet.com.br is-at 0:20:af:f6:e4:18 > 10:50:45.824872 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > S 143861:143861(0) win 8192 <mss 1460> (DF) > 10:50:45.825285 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > S 466638781:466638781(0) ack 143862 win 17520 <mss 1460> (DF) > 10:50:45.825626 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > . ack 1 win 8760 (DF) > 10:50:45.825793 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > P 1:73(72) ack 1 win 8760 (DF) > 10:50:45.860242 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > . ack 73 win 17448 (DF) > 10:50:45.907304 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 1:5(4) ack 73 win 17520 (DF) > 10:50:45.907991 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > P 73:247(174) ack 5 win 8756 (DF) > 10:50:45.911852 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 5:78(73) ack 247 win 17520 (DF) > 10:50:45.912656 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > P 247:397(150) ack 78 win 8683 (DF) > 10:50:45.949712 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 78:165(87) ack 397 win 17520 (DF) > 10:50:45.950538 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > P 397:507(110) ack 165 win 8596 (DF) > 10:50:45.953470 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 165:265(100) ack 507 win 17520 (DF) > 10:50:46.061145 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > . ack 265 win 8496 (DF) > 10:50:46.061467 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 265:342(77) ack 507 win 17520 (DF) > 10:50:46.261554 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > . ack 342 win 8419 (DF) > 10:50:46.502053 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:50:47.253501 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:26.886577 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > P 144478:144588(110) ack 466639300 win 8242 (DF) > 10:54:26.889193 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 1:101(100) ack 110 win 17520 (DF) > 10:54:27.086804 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > . ack 101 win 8142 (DF) > 10:54:27.087144 einstein.mpcnet.com.br.netbios-ssn > 150.150.150.131.1028: > P 101:178(77) ack 110 win 17520 (DF) > 10:54:27.094069 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:27.287188 150.150.150.131.1028 > einstein.mpcnet.com.br.netbios-ssn: > . ack 178 win 8065 (DF) > 10:54:27.838290 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:28.589767 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:29.341939 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:30.092654 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > 10:54:30.844092 150.150.150.131.netbios-ns > 150.150.150.255.netbios-ns: > udp 50 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.980503030914.25840A-100000>