On Wed, 2 Jul 1997, Randy Edwards wrote:

(i've deleted lots of stuff which seemed fine and didn't seem to need a
response)

> > can your linux machine ping the win95 machine?
> 
>    Nope, when I ping the Win95 box I get a 100% loss.


> > what's in your arp table on the linux machine? try 'arp -an'. You want
> > to see arp entries for both machines.
> 
>    Ahh, this is something.  After trying a ping from each machine, after
> running an arp -an the output is:
> Address                 HWtype  HWaddress           Flags Mask Iface
> 192.168.1.3             ether   00:C0:26:80:1E:73   C     *    eth0
> 
>    If I could ask, what does this mean?  As you can tell my knowledge of
> Linux/TCP/IP networking is limited and I haven't gotten up to the chapter on
> arp yet reading the NAG. :-)

The arp table matches IP addresses against Hardware addresses in the
ethernet card (also known as MAC addresses).   Each ethernet card has a
hard-coded unique MAC address.

IP (Internet Protocol) is just one of many networking protocols which
can run "on top of" the lower-level ethernet protocols. e.g. IPX for
novell, IP, and appletalk protocols can all run simultaneously on the
same ethernet.

So, this table is saying that IP address 192.168.1.3 (your win95 machine?)
is at the machine with ethernet card 00:C0:26:80:1E:73

(see man arp for details)


> > try running tcpdump on the linux machine - according to the RX & TX
> > lines above, it looks like there is definitely some activity. You can
> > monitor the network with tcpdump.
> 
>    Okay, here's what tcpdump puts out when I ping the Linux box from the
> Win95 box:
> tcpdump: listening on eth0
> 10:03:55.265899 arp who-has spartacus.golgotha.net tell horeb

this is the win95 machine asking for the linux box's hardware address.

> 10:03:55.265899 arp reply spartacus.golgotha.net is-at 0:c0:26:80:1f:71

this is the linux box saying "here i am".

> 10:03:55.265899 horeb > spartacus.golgotha.net: icmp: echo request

win95 sends a ping.

> 10:03:55.265899 spartacus.golgotha.net > horeb: icmp: echo reply

linux replies.

> 10:03:56.705899 horeb > spartacus.golgotha.net: icmp: echo request
> 10:03:56.705899 spartacus.golgotha.net > horeb: icmp: echo reply

and again

> 10:03:58.185899 horeb > spartacus.golgotha.net: icmp: echo request
> 10:03:58.185899 spartacus.golgotha.net > horeb: icmp: echo reply

and again

> 10:03:59.225899 horeb > spartacus.golgotha.net: icmp: echo request
> 10:03:59.225899 spartacus.golgotha.net > horeb: icmp: echo reply 

and again

I can't see a problem on the linux end. It looks as if it should work
fine. Is there anything in /var/log/messages (or in the output of
'dmesg') which suggests a fault with either the network card or the
cable?


is the tcpdump output similar when you ping the win95 machine from
linux? From what you said above about 100% packet loss when pinging from
linux to win95, I'd guess that you'll see the "echo requests" in tcpdump
but not the "echo replies"....which indicates that the win95 machine
isn't able to receive packets.

are there any irq conflicts with the ethernet card on the win95 machine?
irq conflicts with network cards often manifest as being able to send but
not receive packets.


> Now, looking at the above, I see a difference in the tcpdump response
> and the hardware address response of arp -an: 1E:73 and 1F:71. Now,
> that doesn't seem quite right but I'm unsure of how to interpret that
> -- any ideas? If so, I'd greatly apprecite 'em.

It's ok. The Linux box's MAC address IS different to the win95 machines
MAC address.


craig

--
craig sanders
networking consultant                  Available for casual or contract
temporary autonomous zone              system administration tasks.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .

Reply via email to