Vikash wrote:
> Hello,
>
> Thanks for your reply.
>
> I did what you suggested but it didnt work :-(
>
> I have attached the output of ppp0 to this email.
>
> I was connected with IP address 202.85.95.85 and the output shown in file
> pppwww was keeping up my connection. In this session I used netscape to
> goto the site www.scmp.com and did nothing after that. In this case the
> website started these packets but since they were every 2 minutes and my
> diald timeout was also 2 minutes....it managed to disconnect by itself when
> the website was a bit late.
>
> The connection came back up again in about a minute or so with the IP
> address 202.85.99.209 and the output during this connection is in pppout2.
> As you can see that the packets with IP address of the previous connection
> is still there aswell as the ones from a connection even before that!!
> There are no packets with the current IP address but the link stays up!!
>
> They do not look like tcp.fin packets to me, but im no expert so I cant say
> for sure. The line ignore tcp tcp.fin in standard.filters did not help.
> Also "echo 7 > /proc/sys/net/ipv4/ip_dynaddr" in rc.local did not work.
>
> I dont know what these packets are and why they are bugging me. I hope you
> can help.
>
> Vikash.
>
> At 05:52 21/10/99 , Eric Ruksyio wrote:
> >On Wed, Oct 20, 1999 at 08:30:25PM +0800, Vikash Khatuwala wrote:
> > >
> > > I dont kill netscape, I close it so it should not be the cause and i have
> > > also noticed the same problem by using lynx at the console.
> > >
> > > After a bit more testing I have noticed the following situations.
> >
> >Try this :
> >edit your diald.filter and add the following line juste after the www line
> >ignore tct tcp.fin
> >
> >This must resolve your problems...
> >If no, add in your /etc/rc.d/rc.local at the end the line
> >echo 7 > /proc/sys/net/ipv4/ip_dynaddr
> >
> >Good luck
> >
> >--
> >Cordialement, Eric l'assistant internet (UIN 7662513).
>
> ------------------------------------------------------------------------
> Name: Pppout2
> Pppout2 Type: Plain Text (text/plain)
> Encoding: quoted-printable
>
> PppwwwName: Pppwww
> Type: Plain Text (text/plain)
02:01:52.540336 202.85.95.211.1026 > 137.222.1.6.14908: F 322194279:322194279(0)
ack 86881963 win 32120 <nop,nop,timestamp 216629 847299> (DF)
02:04:58.780297 202.85.95.211.1026 > 137.222.1.6.14908: F 0:0(0) ack 1 win 32120
<nop,nop,timestamp 235253 847299> (DF)
02:04:58.780297 202.85.95.211.1026 > 137.222.1.6.14908: F 0:0(0) ack 1 win 32120
<nop,nop,timestamp 235253 847299> (DF)
These three packets are very curios, at least to me. This looks like something
was sent to port 14908 at 137.222.1.6 from your ppp interface expecting a
response on port 1026. Port 14908 is not defined in my /etc/services file, is it
in yours, and if so what is it? I did a quick search on deja news, but nothing
popped up. Maybe someone else knows what this port is for.
BTW: 137.222.1.6 looks like a dialup port on a terminal server at the University
of Bristol in the UK.
Sorry I could not be of more help.
--
--------------------------------------------------------
Bob Chiodini [EMAIL PROTECTED]
--------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]