Will Murnane wrote:
If you're looking for a slightly more user-friendly network diagnostic
tool, check out Ethereal instead of tcpdump. It captures the same
Thanks Will. Using Ethereal made it immediately apparent that Tom was
right (big surprise) in that there are no ACKs coming back from the
server in question.
I didn't make the "Your ISP is blocking SYN/ACK packets" leap because
the server in question is not mine. Therefore "my ISP" to me means by
rather tried and true connection which I knew be clean. Of course Tom
wouldn't know that and as soon as I realized that we could be talking
about the other server, it all came together. The owner of that server
does indeed have a "home" account and therefore it looks like ACKs are
being blocked.
I presume, anyhow, that's what this type of trace shows? I am the 142.
and the server in question is the 66. There are no other packets with
those IPs in the trace and since I only see SYNs. I see other
connections in the trace that show ACKs, just nothing involving these
two IPs.
I'm attaching a small screen cap (which may not make it) because
Ethereal is giving me some stupid "you don't have permission to move the
capture file" error when I try to save it despite starting Ethereal as
root. And...really...I've burned enough time on this.
Thanks for the tip!
Jon
begin:vcard
fn:Jon Watson
n:Watson;Jon
email;internet:[EMAIL PROTECTED]
tel;work:1.403.875.6048
x-mozilla-html:FALSE
url:http://www.jonwatson.ca
version:2.1
end:vcard
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
