Sean Dogar wrote: > I ran tcpdump on both hosts while attempting to secure shell from the > Linux box. > > From the OpenBSD box, I ran: > > tcpdump -n host not 10.10.1.130 > bge1.dump > > and got nothing back in bge1.dump at all. tcpdump reported: > > tcpdump: listening on bge1, link-type EN10MB > ^C > 23 packets received by filter > 0 packets dropped by kernel > > > > From the Linux box I got a little more information: > > I ran: tcpdump -n host not 10.10.1.130 > eth0.dump > > I'm not going to kill the list with the whole tcpdump (email me > off-list if you want it), but I grepped for the IP address of the > OpenBSD box: > > cat eth0.dump |grep 172.16.1.22 > 17:16:47.766317 arp who-has 172.16.1.22 tell 172.16.1.144 > 17:16:48.766068 arp who-has 172.16.1.22 tell 172.16.1.144 > 17:16:49.765827 arp who-has 172.16.1.22 tell 172.16.1.144 > > > Does it seem as if the OpenBSD box isn't responding to the ARP > requests?
Appears either the switch is not broadcasting these arps or OpenBSD is not seeing them for some reason. Any chance the OpenBSD box is in a different VLAN or some kind of filtering is being done between it and the Linux box? Do you have some kind of special switchport, port-security, storm-control or other neat settings configured on the Catalyst and associated ports that might be "playing games?" Maybe a bad port on the Catalyst? Outside of this, I'm not certain what to think at this time. Perhaps someone else can chime in with other thoughts or other things to try on the OpenBSD box...
