Re: arp response fails

2015-12-15 Thread Charles Swiger
On Dec 15, 2015, at 2:47 PM, bcs wrote: > I have 3 FreeBSD 10.2-RELEASE machines and all of them suffers of the > following problem. They are not responding to ARP requests which causes > network problem for me, other hosts can't access my FBSD machines on the LAN > nor my FBSD hosts can see ea

Re: IPFW blocked my IPv6 NTP traffic

2015-11-30 Thread Charles Swiger
Hi, Mark-- On Nov 30, 2015, at 1:58 PM, Mark Felder wrote: > [ ... ] > I noticed my outbound IPv6 didn't have $ks for udp, so I added it. > However, that had no effect. The solution was to add an incoming rule: > > $cmd 03755 allow udp from any to any src-port 123 in via $pif6 $ks > > This seem

Re: who uses this port?

2015-11-04 Thread Charles Swiger
On Nov 4, 2015, at 11:40 AM, Andriy Gapon wrote: > $ sockstat -l | fgrep 631 > ?? ? ? tcp4 127.0.0.1:631 *:* > > $ nc -l 127.0.0.1 631 > nc: Address already in use That's the IPP port, commonly grabbed by CUPS and other printing software: % grep 631 /etc/services

Re: [BUG?] dhclient sends packets with source IP address that has been deleted

2015-04-07 Thread Charles Swiger
On Apr 7, 2015, at 2:07 PM, Yuri wrote: > On 04/07/2015 07:53, Brooks Davis wrote: >> I suppose that since dhclient has been killed and restarted it can't >> know it's on the same network, but in practice you want to try to get >> the same lease again and fall back if it turns out you've moved or

Re: MTU not regrowing?

2014-06-24 Thread Charles Swiger
Hi-- On Jun 24, 2014, at 11:43 AM, Andrea Venturoli wrote: > Hello. > > Today I experienced something weird (at least for me) on a 8.4 system: > > _ the system had vlan3 interface, with default MTU (1500 bytes); > _ "ping -D -s 1400 somehost" would work, but "ping -D -s 1500 somehost" would >

Re: Packet Construction and Protocol Testing...

2006-07-21 Thread Charles Swiger
On Jul 21, 2006, at 1:43 PM, Clément Lecigne wrote: 44-pi# grep -l pcap_inject /usr/lib/libpcap* 45-pi# nm -g /usr/local/lib/python2.4/site-packages/pcap.so | grep pcap_inject U pcap_inject Have you disable bpf support ? Which version of libpcap do you use ? No, bpf is compiled in

Re: Packet Construction and Protocol Testing...

2006-07-21 Thread Charles Swiger
On Jul 20, 2006, at 10:10 PM, [EMAIL PROTECTED] wrote: [1]: If I could only get net/py-pcap to build, I might be able to do a little more... :-) You only need net/py-pypcap, but if that's what you meant please let me know what the build problem is. Interesting-- basicly, your tests commonl

Re: Question about netinet/ip.h

2006-05-31 Thread Charles Swiger
On Jun 1, 2006, at 12:57 AM, Emil Kondayan wrote: Can someone tell me why "ip_hl" and "ip_v" are of type "u_int" when the structure is packed and they only fill a byte? Well, that struct definition is relying on the compiler to squeeze the bitfields into the smallest space required. Some p

Re: changing default route

2006-05-15 Thread Charles Swiger
On May 15, 2006, at 7:04 PM, OxY wrote: have two interfaces with the same ip, em0 connected to another server with crosslink, em1 is the public, can be reached from the internet connected to a switch. Don't do that. Use bridging instead, if appropriate. -- -Chuck _

Re: is NFS production-ready ?

2006-04-10 Thread Charles Swiger
On Apr 10, 2006, at 3:26 PM, dima wrote: First, searching through the archives I'm about to say "No". My goal is to provide NFS service to many FreeBSD clients sharing the exports. The usage pattern appears to be "many reads and not as much writes". The deployment might look like the follow

Re: Non dropping packet monitor

2006-03-24 Thread Charles Swiger
On Mar 24, 2006, at 5:46 PM, Paul Haddad wrote: I need to monitor packets flowing in/out of a freebsd 6.x box in a tcpdump/pcap (monitor only) style but I can't have packets dropped as tcpdump often does when its buffer fills up. I'm fine if the entire network connection slows down because of th

Re: Good gigabit NIC for 4.11?

2005-12-23 Thread Charles Swiger
On Dec 23, 2005, at 4:47 PM, Rink Springer wrote: However, there is little point to trying to use GB and jumbo frames on a NIC in a standard 33MHz PCI slot; unless you have PCI Express slots available or a GB card integrated with the chipset, the PCI bus will bottleneck the system from doing much

Re: Good gigabit NIC for 4.11?

2005-12-23 Thread Charles Swiger
On Dec 23, 2005, at 2:32 PM, Matt Staroscik wrote: I'm looking for a basic PCI 1-port card with jumbo frame support if possible--I can live without it. Either way, stability is much more important than performance. 4.11 ought to work well with both the Broadcom and Intel GB NICs. However, ther

Re: Re[2]: nat exclusion?

2005-11-02 Thread Charles Swiger
On Nov 2, 2005, at 4:45 PM, Peter Gregorc wrote: I've got 86.61.75.240/30 .241 is for BSD .242 for WS1 .243 broadcast So two are usable for outside usage, if NAT is disabled. Sure, but normally, either .1 or .2 of a /30 subnet (ie, your .241 or .242) is the externally-connected router of your

Re: nat exclusion?

2005-11-02 Thread Charles Swiger
On Nov 2, 2005, at 4:09 PM, Peter Gregorc wrote: My config is like this: ADSL MODEM BSD WS1 WS2 WS3 | || | | | (switch or hub-doesn't matter) I've got a /30 class subnet from my ISP. What i want to do is: -my BSD should start a PPPoE connection with my

Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 6:31 PM, Julian Elischer wrote: [ ...about the ip_vhl byte... ] sorry misread you.. yes.. OK. on my net segment there are a lot of other non IP packets floating around and I am used to seeing 45 and 42 and didn't stop to think that the 42 are not IP :-) No problem, the

Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 5:29 PM, Julian Elischer wrote: I agree with your suggestion, but how can you have an ip_vhl of 0x42? Doesn't a valid IP packet need to have a header length of at least 5 (5 << 2 == 20 bytes)? huh? the first byte of an IP packet is not the length.. the first byte you s

Re: bpf writes on tun device

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 4:56 PM, Matthew Luckie wrote: Agreed. When you use BPF or PCAP to capture packets, for the DTL_NULL case there is a 4-byte offset between where PCAP says the packet starts and where the actual raw IP packet starts. If you want BPF/PCAP to return packets without the 4-byt

Re: bpf writes on tun device

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 3:54 PM, Matthew Luckie wrote: I'd be wary of changing the definition of DLT_NULL however -- it literally means 'there's nothing here apart from raw data', and changing this notion would mean that we have to change it everywhere, including bpf clients, because the change b

Re: divert sock api q

2005-06-07 Thread Charles Swiger
On Jun 7, 2005, at 1:14 PM, Julian Elischer wrote: I apologize for being so exceptionally dense, this is driving me completely up the walls.. if you are receiving the entire IP packet in user space (first byte is 0x42 or 0x45 usually) then you need to update teh packet length field of the

Re: issue with route

2005-06-03 Thread Charles Swiger
On Jun 3, 2005, at 6:40 PM, Li, Qing wrote: Are you perhaps asking for .emacs setting which conforms to this (the four-space) style? Yes, do you have one ? For most purposes, if you set c-basic-offset to 4, this will also work fine with classic BSD-style code using 8-chars as the initia

Re: sending MAC packets --- again, and again

2005-05-21 Thread Charles Swiger
On May 21, 2005, at 12:27 PM, Daniel Valencia wrote: [ ...pcap reading code stalling... ] Is this normal pcap behaviour, or is it some FreeBSD-specific behaviour, or is it just me? It's unfortunately normal. You're running into this (from "man pcap"): NOTE: when reading a live capture

Re: sending MAC packets --- again, and again

2005-05-21 Thread Charles Swiger
On May 20, 2005, at 11:16 PM, Daniel Valencia wrote: I know this may sound funny, but I'm still wrestling with libpcap because I send packets and I cannot read them. I tried also some example code of a toy sniffer from a tutorial to pcap, and it behaves just like my code. As my code is pretty c

Re: sending MAC packets

2005-05-03 Thread Charles Swiger
On May 3, 2005, at 8:33 PM, Daniel Valencia wrote: I'm doing research on network-layer protocols, so I need a way to send packets straight into layer 2. So far i've been reffered to raw sockets, but i've read the code and i cannot skip header checking and that stuff... Is there a way to interact

Re: Disable NFS client cache (or other traffic reduction methods)

2005-04-07 Thread Charles Swiger
On Apr 7, 2005, at 3:51 PM, Eli Dart wrote: Looking at the packet contents, it appears to be fetching back the last few blocks of the log file. My guess is that this is the client keeping its NFS cache fresh. The client is never, ever, ever going to read that file (or any file on that filesystem) o

Re: Q: routing, nat

2005-04-04 Thread Charles Swiger
On Apr 4, 2005, at 4:24 PM, Alan wrote: I am trying to setup a home network with Internet access for a windows xp machine and freeSBIE workstation and want to use the bsd station to act as a gateway for the windows one. I am having hard time setting the correct routing info. I will really appreciat

Re: FreeVRRPd project status

2005-04-04 Thread Charles Swiger
On Apr 4, 2005, at 3:35 PM, Markus Oestreicher wrote: Does anyone know the current status of the FreeVRRPd project? It's dead, I think: Cisco's lawyers started making predatory noises about their "intellectual property". Some people from NetBSD are working on a replacement called CARP, which yo

Re: tcpdump/bpf and seeing .1q tags

2005-03-09 Thread Charles Swiger
On Mar 9, 2005, at 2:22 PM, Charlie Schluting wrote: So with tcpdump -e it somehow magically sees vlan tags.. even if hardware stripping of the tags is enabled. How? tcpdump normally puts the interface into promiscuous mode. Perhaps retry using the '-p' flag? More importantly, I'm trying to figure

Re: DNS question ???

2005-03-04 Thread Charles Swiger
On Mar 4, 2005, at 2:02 PM, Sheh, Peter wrote: [ ...crossposting trimmed... ] Hope someone can help me with this question: "What does DNS do when the same hostname is reported from multiple systems with different IP addresses? " The DNS returns the same hostname for each of the IPs which have

Re: Fixing "Slipping in the window" before 4.11-release

2005-01-03 Thread Charles Swiger
On Jan 3, 2005, at 2:31 AM, Mike Silbersack wrote: For the life of me, I can't figure out why SYN packets (other than delayed retransmissions of the original SYN) would ever show up once a connection is in the ESTABLISHED state. So, I'm proposing the attached patch, which simply ignores any pac

Re: Working on howl port

2004-12-13 Thread Charles Swiger
On Dec 13, 2004, at 4:06 AM, Andrea Campi wrote: I'd like to live complications such as this for a later stage. I'd say if you have a multihomed machine you better know how to configure it; the primary target for my work are laptops and other clients. That is not to say I don't care; rather, I need

Re: polling(4) rocks!

2004-11-17 Thread Charles Swiger
On Nov 17, 2004, at 1:52 PM, Eugene Grosbein wrote: On Wed, Nov 17, 2004 at 09:13:51PM +0300, Yar Tikhiy wrote: [ ...praise of polling(4)... ] Does polling(4) increase latency? It is very imortant for router that handles lots of RTP (VoIP) traffic. Using polling does increase the latency of the tra

Re: gateway for separate networks

2004-09-11 Thread Charles Swiger
On Sep 11, 2004, at 9:41 PM, Bob Ababurko wrote: I have two networks that are routed to me via a serial connection, namely a T1. I have just installed a new router and it has two ethernet ports that will route to the two different networks. What I want to do is have a single machine have two r

Re: Tunneling HTTPS with Squid

2004-09-07 Thread Charles Swiger
On Sep 7, 2004, at 9:53 AM, Vladimir Terziev wrote: When HTTP traffic is forwarded with Squid all is ok, because the proper X-FORWARDED-FOR header is set and we are able to identify the request issuer. When Squid forwards HTTPS traffic to us, situation is different, because the only IP which we

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-03 Thread Charles Swiger
On Sep 3, 2004, at 6:54 AM, RRrp Toren wrote: What you're trying to do work actually give you much benefit to security: someone who wants to break in doesn't have to pay attention to the DHCP lease you give them, they can just assign themselves a good 10.0.0.x address. I am not a believer in

Re: 3 NICs - 1 upstream, 2 downstream to same subnet??

2004-09-02 Thread Charles Swiger
On Sep 2, 2004, at 2:17 PM, rip wrote: I am trying to make a configuration to isolate the WiFi APs on a single segment. DHCP hands out 'good' addresses (10.0.0.x) to MACs it recognizes and 'bad' (10.99.0.x) when the MAC does not match and is taken from the common pool. I then will use ipfw to bl

Re: proposed new if_data variable

2004-08-27 Thread Charles Swiger
On Aug 27, 2004, at 4:05 PM, Brooks Davis wrote: Since this will increase the size of struct if_data and thus struct ifnet, the change needs to be made now if it's going to be made for 5-STABLE. Any comments on this idea? I think the change is useful, by all means. -- -Chuck __

Re: em driver worse then fxp driver ... why?

2004-08-10 Thread Charles Swiger
[ ...crossposting between stable and freebsd-net trimmed... ] On Aug 10, 2004, at 4:37 PM, Marc G. Fournier wrote: I've tried in bth half and full duplex mode .. full duplex, Ierrs climbs, half-duplex, Collisions climb ... You should expect to see some collisions (1% or so) when working in half-d

Re: comparision of firewalling on Linux and FreeBSD

2004-06-30 Thread Charles Swiger
On Jun 30, 2004, at 1:47 PM, [EMAIL PROTECTED] wrote: Looking for considered comparisions of firewalling on Linux and FreeBSD. Hmm, what you should be considering is whether you want to use pf/IPF, or IPFW. If IPFW makes more sense to you, use FreeBSD. If you want to use IPF, either platform w

Re: udp checksum on raw sockets

2004-04-27 Thread Charles Swiger
On Apr 27, 2004, at 12:09 PM, Mark Santcroos wrote: * I'm sending UDP packets on a raw socket. * iphdr->ip_src.s_addr = INADDR_ANY; So I don't know the IP address that will be used as src address. The kernel ought to pick the src address of the interface the packet will be sent from according t

Re: IP_ONESBCAST and upcoming RELENG_4_9 freeze

2004-01-26 Thread Charles Swiger
On Friday, August 22, 2003, at 01:35 AM, Wes Peters wrote: On Thursday 21 August 2003 07:22 am, Bruce M Simpson wrote: Hi all, Does anyone have any major objections to an MFC'ing of IP_ONESBCAST which I committed yesterday before the upcoming 4.9 code freeze next Monday? No, please do-- your and W

Re: suffering from poor network performance...

2003-12-17 Thread Charles Swiger
On Dec 17, 2003, at 9:34 AM, Bill Vermillion wrote: I've not tried the ping but I'm seeing exceptionally poor performance on G4s to FreeBSD. The G4's can ftp to each other at about 8-9MB/sec, as can the FreeBSDs. They are on a Cisco 2948 switch. But ftp from BSD to G4 is in the order of 20-40KB/

Re: suffering from poor network performance...

2003-12-16 Thread Charles Swiger
On Dec 16, 2003, at 7:22 PM, Alex (ander Sendzimir) wrote: [ ... ] First, Barney was correct: using "ping -f" will run into the ICMP response limitation. Try using "ping -i 0.01 _hostname_", instead, and you may find out that you don't have a problem with packet loss at all at this lower speed.

Re: suffering from poor network performance...

2003-12-16 Thread Charles Swiger
On Dec 16, 2003, at 6:32 PM, Barney Wolff wrote: You're seeing icmp rate-limiting. Don't worry about it. Whoops, I didn't pay particular attention to the "-f" option, but you're absolutely right... -- -Chuck ___ [EMAIL PROTECTED] mailing list http://li

Re: suffering from poor network performance...

2003-12-16 Thread Charles Swiger
On Dec 16, 2003, at 5:58 PM, Alex (ander Sendzimir) wrote: I have a small home network with a PowerBook G4 and FBSD 4.9-STABLE connected through a Netgear DS108 hub (10/100). If the device works at both 10 and 100 speed, it's a switch, not a hub. Anyway, the very high rates of packet loss you rep

Re: Controlling ports used by natd

2003-12-14 Thread Charles Swiger
On Dec 12, 2003, at 7:19 PM, Barney Wolff wrote: I have a real philosophical problem with ceding ports to worms, viruses and trojans. Where will it stop? Portno is a finite resource. This is a respectable position, but the notion of categorizing ranges of ports into an association with a securit

Thoughts on IPv6, was: Re: Help Broadcasting a UDP packet on the LAN:URGENT

2003-10-23 Thread Charles Swiger
On Thursday, October 23, 2003, at 03:43 PM, Barney Wolff wrote: My expectation is the same as yours, but I strongly believe that anyone doing a new design that deliberately ignores IPv6 is being very shortsighted. "Quite some time" is now only years, not decades. It might be useful to consider ano

Re: Help Broadcasting a UDP packet on the LAN:URGENT

2003-10-23 Thread Charles Swiger
On Thursday, October 23, 2003, at 03:43 PM, Barney Wolff wrote: On Thu, Oct 23, 2003 at 02:23:57PM -0400, Charles Swiger wrote: What are you going to do when IPv6 comes into more general use, since it has no broadcast address? Are you asking what a IPv4-to-IPv6 translator (like gif?) should do

Re: Help Broadcasting a UDP packet on the LAN:URGENT

2003-10-23 Thread Charles Swiger
On Thursday, October 23, 2003, at 02:45 PM, Wes Peters wrote: The all-ones broadcast is supposed to go to all physically connected network segments, regardless of whether a particular interface is ifconfig'ured with an IP that is part of a particular layer-3 subnet. You should be able to send the b

Re: Help Broadcasting a UDP packet on the LAN:URGENT

2003-10-23 Thread Charles Swiger
On Thursday, October 23, 2003, at 11:52 AM, Barney Wolff wrote: On Thu, Oct 23, 2003 at 01:55:55AM -0700, Wes Peters wrote: [ ... ] What are you going to do when IPv6 comes into more general use, since it has no broadcast address? Are you asking what a IPv4-to-IPv6 translator (like gif?) should do,

Re: DNS Translation

2002-12-11 Thread Charles Swiger
Jonathan Feally wrote: > Has anyone come across a daemon that will translate dns query > responses from inside ip's to outside ip's, when the query is though > the firewall? The CISCO PIX I have at work does this with the alias > command - but - I'm not at work where I'd like to do that. See the B

Re: broadcast over loopback

2002-12-10 Thread Charles Swiger
Joshua Graessley wrote: [ ... ] > If someone is using broadcast for a service discovery protocol instead > of multicast, they would want services, whether running locally or > remotely, to receive that broadcast. Sure, since the thing doing service discovery may not be the same as the thing (or th