Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread Aleksandar Milosevic
> tcpdump -netttvvvSXi interfacename > > should show you something like Here it is: Feb 05 11:59:06.601418 0:b:6:bc:7b:e ff:ff:ff:ff:ff:ff 0806 60: arp who-has 192.168.0.10 tell 24.145.134.116 : 0001 0800 0604 0001 000b 06bc 7b0e 1891 ...<{... 0010: 8674 c0a8

Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread J. Alfred Prufrock
Darren Spruell wrote: As per above, the tcpdump output suggests a more likely misconfiguration of the cable modem rather than the BSD box. I'm starting to wonder if it's been deliberately (mis-)configured this way. Thinking to reconfigure the cable-modem box myself (as opposed to going with th

Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread Darren Spruell
On 2/5/07, Vijay Sankar <[EMAIL PROTECTED]> wrote: On Monday 05 February 2007 11:55, J. Alfred Prufrock wrote: > > > tcpdump -netttvvvSXi interfacename > > > > should show you something like > > Here it is: > > Feb 05 11:59:06.601418 0:b:6:bc:7b:e ff:ff:ff:ff:ff:ff 0806 60: arp > who-has 192.1

Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread Vijay Sankar
On Monday 05 February 2007 11:55, J. Alfred Prufrock wrote: > > > tcpdump -netttvvvSXi interfacename > > > > should show you something like > > Here it is: > > Feb 05 11:59:06.601418 0:b:6:bc:7b:e ff:ff:ff:ff:ff:ff 0806 60: arp > who-has 192.168.0.10 tell 24.145.134.116 >: 0001 0800 0604

Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread J. Alfred Prufrock
Vijay Sankar wrote: > By the way, regarding list etiquette, I am copying you because you > had asked for that in an earlier message. I should not have included > Darren and John, but what happened was that I did a "Reply All", not > noticing that you had sent the messages to those two folks as wel

Re: arptables: unable to enter address, TCPDUMP

2007-02-05 Thread Vijay Sankar
On Sunday 04 February 2007 23:27, J. Alfred Prufrock wrote: > Darren Spruell wrote: > > Grab that exchange again with the -n flag to tcpdump. Include the MAC > > address(es) of the cable modem if you can get them. > > Here it is: > > 00:14:04.475261 arp who-has 192.168.0.10 tell 24.aaa.bbb.ccc >

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread J. Alfred Prufrock
Darren Spruell wrote: Grab that exchange again with the -n flag to tcpdump. Include the MAC address(es) of the cable modem if you can get them. Here it is: 00:14:04.475261 arp who-has 192.168.0.10 tell 24.aaa.bbb.ccc 0001 0800 0604 0001 000b 06bc 7b0e 1891

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread J. Alfred Prufrock
Vijay Sankar wrote: Possibly a silly question -- how are you connecting the cable modem to your OpenBSD server's external interface? Are they all plugged into a switch or hub or are you using a cable from the external interface directly to the cable modem? The external NIC connects directly t

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread Darren Spruell
On 2/4/07, J. Alfred Prufrock <[EMAIL PROTECTED]> wrote: PS: I notice that when I reply-all to Vijay, Darren's and John's email addresses also show up. What's the etiquette here? Should I reply to just Vijay and misc, or to everyone whose address is included? Or will the list-man

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread Darren Spruell
On 2/4/07, J. Alfred Prufrock <[EMAIL PROTECTED]> wrote: tcpdump -vv -x -l results attached below. I just ran tcpdump; here's the line at which I get the error/warning/log message: 19:14:03.562039 arp who-has rock tell 24.aaa.bbb.ccc [Note: 24.aaa.bbb.ccc is the cable-modem box's WAN address.]

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread Vijay Sankar
On Sunday 04 February 2007 18:37, J. Alfred Prufrock wrote: > Darren Spruell wrote: > > It's curious that the outside interface address on the cable modem > > is showing up for any reason on the internal network. > > Right, this is what first puzzled me too. Possibly a silly question -- how are

Re: arptables: unable to enter address, TCPDUMP

2007-02-04 Thread J. Alfred Prufrock
Darren Spruell wrote: > It's curious that the outside interface address on the cable modem > is showing up for any reason on the internal network. Right, this is what first puzzled me too. > You might use tcpdump or similar on your internal network to > determine what kind of traffic it relates