Hi Steve,
read https://help.ubuntu.com/community/UFW as it may give some insight > That is going to help a lot. I didn't know that UFW was running on this box. I thought it was just protected by the University firewall. I have disabled it and will see if the network stays up. Assuming it does I will start looking around in the rules to try to find out what was happening and once that is sorted will re-enable it. Stripes. > > Steve > > > On 01/09/2013 08:13 PM, stripes theotoky wrote: > >> Just got back to work to find the network frozen again so ran the >> following >> tests >> >> host seems as if DNS is working and I can't run tcptraceroute because >> right >> now the network is behaving but have installed it and will run it the next >> time the network freezes. >> >> Stripes >> >> Is there anything odd appearing in dmesg? >> >>> >>> >> dmesg looks weird to me but I don't know enough to know what it is >> trying >> to tell me. >> >> [96377.098569] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=1726 DF PROTO=TCP >> SPT=10002 DPT=38193 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96397.271477] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=1878 DF PROTO=TCP >> SPT=10002 DPT=58486 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96417.093354] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=2022 DF PROTO=TCP >> SPT=10002 DPT=40273 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96436.994151] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=40 TOS=0x00 PREC=0x00 TTL=125 ID=2170 DF PROTO=TCP >> SPT=10002 DPT=52514 WINDOW=0 RES=0x00 RST URGP=0 >> [96457.439909] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=2338 DF PROTO=TCP >> SPT=10002 DPT=49735 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96477.278106] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=2492 DF PROTO=TCP >> SPT=10002 DPT=39062 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96497.097806] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=2642 DF PROTO=TCP >> SPT=10002 DPT=63464 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96517.264219] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=2801 DF PROTO=TCP >> SPT=10002 DPT=41087 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96537.157160] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=40 TOS=0x00 PREC=0x00 TTL=125 ID=2981 DF PROTO=TCP >> SPT=10002 DPT=58972 WINDOW=0 RES=0x00 RST URGP=0 >> [96557.000166] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=3124 DF PROTO=TCP >> SPT=10002 DPT=51388 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96577.021152] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=56 TOS=0x00 PREC=0x00 TTL=125 ID=3283 DF PROTO=TCP >> SPT=10002 DPT=34476 WINDOW=65535 RES=0x00 ACK SYN URGP=0 >> [96597.425777] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=3437 DF PROTO=TCP >> SPT=10002 DPT=38699 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96617.245539] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=3582 DF PROTO=TCP >> SPT=10002 DPT=40359 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96637.036939] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=3732 DF PROTO=TCP >> SPT=10002 DPT=54144 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [96657.206130] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**0f:ed:ee:c0:08:00 SRC=131.172.8.83 >> DST=131.172.182.35 LEN=60 TOS=0x00 PREC=0x00 TTL=125 ID=3884 DF PROTO=TCP >> SPT=10002 DPT=37665 WINDOW=8192 RES=0x00 ACK SYN URGP=0 >> [97797.065193] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**df:5b:b6:40:08:00 SRC=69.175.126.170 >> DST=131.172.182.35 LEN=74 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=UDP >> SPT=40369 DPT=5353 LEN=54 >> [102387.437169] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**df:5b:b6:40:08:00 SRC=213.131.66.37 >> DST=131.172.182.35 LEN=44 TOS=0x00 PREC=0x00 TTL=41 ID=0 DF PROTO=ICMP >> TYPE=8 CODE=0 ID=4396 SEQ=256 >> [107008.373813] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**df:5b:b6:40:08:00 SRC=10.11.250.1 >> DST=131.172.182.35 LEN=61 TOS=0x00 PREC=0x00 TTL=125 ID=19923 PROTO=ICMP >> TYPE=8 CODE=0 ID=289 SEQ=18360 >> [107228.020982] [UFW BLOCK] IN=eth0 OUT= >> MAC=84:2b:2b:b4:ee:09:00:17:**df:5b:b6:40:08:00 SRC=101.44.1.135 >> DST=131.172.182.35 LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=38101 PROTO=TCP >> SPT=276 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 >> >> >> >> >> When it's not working what does this command say? >>> >>> host google.com >>> >>> >> host seems as if DNS is working >> >> host google.com >> >> google.com has address 74.125.237.6 >> google.com has address 74.125.237.7 >> google.com has address 74.125.237.8 >> google.com has address 74.125.237.9 >> google.com has address 74.125.237.14 >> google.com has address 74.125.237.0 >> google.com has address 74.125.237.1 >> google.com has address 74.125.237.2 >> google.com has address 74.125.237.3 >> google.com has address 74.125.237.4 >> google.com has address 74.125.237.5 >> google.com has IPv6 address 2404:6800:4006:800::1005 >> google.com mail is handled by 10 aspmx.l.google.com. >> google.com mail is handled by 20 alt1.aspmx.l.google.com. >> google.com mail is handled by 30 alt2.aspmx.l.google.com. >> google.com mail is handled by 40 alt3.aspmx.l.google.com. >> google.com mail is handled by 50 alt4.aspmx.l.google.com. >> >> That'll say whether DNS is affected (or not). >> >>> >>> >> >> Can you install tcptraceroute and then when your connection is not >> >>> working can you also try: >>> >>> sudo tcptraceroute -n 74.125.237.142 >>> >>> >> sudo tcptraceroute -n 74.125.237.142 >> Selected device eth0, address 131.172.182.35, port 43046 for outgoing >> packets >> Tracing the path to 74.125.237.142 on TCP port 80 (http), 30 hops max >> 1 131.172.182.251 0.267 ms 0.215 ms 0.216 ms >> 2 * * * >> 3 * * * >> 4 * * * >> 5 * * * >> 6 * * * >> 7 * * * >> 8 * * * >> 9 * * * >> 10 * * * >> 11 * * * >> 12 * * * >> 13 * * * >> 14 * * * >> 15 * * * >> 16 * * * >> 17 * * * >> 18 * * * >> 19 * * * >> 20 * * * >> 21 * * * >> 22 * * * >> 23 * * * >> 24 * * * >> 25 * * * >> 26 * * * >> 27 * * * >> 28 * * * >> 29 * * * >> 30 * * * >> Destination not reached >> >> >> to see what's going on with a TCP connection to Google? >>> >>> >> Thanks >> Stripes >> >> >> >>> cheers, >>> Chris >>> -- >>> Chris Samuel : http://www.csamuel.org/ : Melbourne, VIC >>> ______________________________**_________________ >>> luv-main mailing list >>> [email protected] >>> http://lists.luv.asn.au/**listinfo/luv-main<http://lists.luv.asn.au/listinfo/luv-main> >>> >>> >> >> >> ______________________________**_________________ >> luv-main mailing list >> [email protected] >> http://lists.luv.asn.au/**listinfo/luv-main<http://lists.luv.asn.au/listinfo/luv-main> >> >>
_______________________________________________ luv-main mailing list [email protected] http://lists.luv.asn.au/listinfo/luv-main
