On Sunday 04 February 2007 23:27, J. Alfred Prufrock wrote: > Darren Spruell wrote: > > Grab that exchange again with the -n flag to tcpdump. Include the MAC > > address(es) of the cable modem if you can get them. > > Here it is: > > 00:14:04.475261 arp who-has 192.168.0.10 tell 24.aaa.bbb.ccc > 0001 0800 0604 0001 000b 06bc 7b0e 1891 > 8674 0000 0000 0000 c0a8 000a 1102 2234 > c0a8 6401 008a 00bb 0000 2046 4445 > 00:14:04.475348 arp reply 192.168.0.10 is-at 0:20:78:1f:0:af > 0001 0800 0604 0002 0020 781f 00af c0a8 > 000a 000b 06bc 7b0e 1891 8674 1102 2234 > c0a8 6401 008a 00bb 0000 2046 4445 > > Did you mean get the MAC addresses from tcpdump? I didn't see the > cable modem box's MAC addresses in the dump file.
tcpdump -netttvvvSXi interfacename should show you something like Feb 05 06:18:35.971171 0:10:dc:9d:81:15 0:4:5a:5f:b8:3c 0800 194: 10.0.0.102.22 > 10.0.0.60.26730: P 1946239115:1946239243(128) ack 3135232539 win 17376 <nop,nop,timestamp 3159846252 0> (DF) [tos 0x10] (ttl 64, id 24542, len 180) 0000: 4510 00b4 5fde 4000 4006 c5b4 0a00 0066 [EMAIL PROTECTED]@.E4...f 0010: 0a00 003c 0016 686a 7401 408b badf da1b ...<[EMAIL PROTECTED]:_Z. 0020: 8018 43e0 a708 0000 0101 080a bc57 6d6c ..C`'.......<Wml 0030: 0000 0000 5b26 be71 94bb b227 4b4b ef77 ....[&>q.;2'KKow 0040: e860 3e7f 91ec 8b0f 5b60 1f0a 6ae9 d30c h`>..l..[`..jiS. 0050: 61d1 aQ What is currently in your hostname.* files? Do you have your hostname.internal interface set up on the right subnet? You said everything was working properly, but is it possible that any of your internal hosts have an address on the wrong (meaning 192.168.0) subnet? By the way, regarding list etiquette, I am copying you because you had asked for that in an earlier message. I should not have included Darren and John, but what happened was that I did a "Reply All", not noticing that you had sent the messages to those two folks as well. > > MAC address of OpenBSD PC's external NIC: 00:20:78:1f:00:af > > Two MAC addresses listed in cable-modem box's admin screen: > 00:0B:06:BC:7B:0A (labelled "Self") > 00:0B:06:BC:7B:0E (labelled "Learned"). > > From the way they're labelled, I'm guessing the former is the cable- > modem box's external address and the latter its internal address. > Not sure how to confirm that guess. > > J > > > !DSPAM:1,45c6cc73107621879814018! -- Vijay Sankar ForeTell Technologies Limited 59 Flamingo Avenue, Winnipeg, MB, Canada R3J 0X6 Phone: +1 (204) 885-9535, E-Mail: [EMAIL PROTECTED]
