On 01/13/2006 12:47 PM, Erik Huizing wrote: > I should also add that while pining the problem host, I ran a packet dump on > both sides. The sending host only say 71% of the replies, but the problem > host says it sent 100% of the replies. > > A packet dump on the switch confirms that only 71% of the replies were sent.
Just out of curiosity: are you sure ethernet speed/duplex autonegotiation is working? Sun boxes are notorious for misnegotiating duplex, especially with Cisco switches. (Yeah, you wouldn't expect Sun and Cisco to interoperate properly, would you? ;^/) Check the duplex reported in /var/adm/messages when link comes up versus the duplex reported on the switch for the port in question. If they don't match you could be having collision problems. You should also check the error counters on the switch and using netstat -i on the Sun. If that's not it, all I can imagine is that maybe pfil is interfering with arp somehow, since you say the switch thinks it only sent 71% of the replies. Does the switch think it received 100% of the replies from the host being pinged? -- Jefferson Ogata <[EMAIL PROTECTED]> NOAA Computer Incident Response Team (N-CIRT) <[EMAIL PROTECTED]> "Never try to retrieve anything from a bear."--National Park Service
