[EMAIL PROTECTED] wrote:
>
> I'm using pcap-lib for sniffing udp packets on an ethernet device on HP-UX
> 11.00. It works fine for 2-3 ours(capturing 5-10 udp messages pr. second
> with size <200bytes) but then our HP-OpenView snmp manager cant ping the
> host normally- here's the message from ping
>
> ICMP Source Quench from pilt (xxx.xxx.xxx.xxx)
> for icmp from bdr-bo-312-001 (xxx.xxx.xxx.xxx) to pilt (xxx.xxx.xxx.xxx)
> pilt is alive
>
> It is still possible to log into the host, ftp to it and so on.
>
> Any ideas are greatly appreciated.
first, hp-ux 11 is entirely too eager to send source quench messages. i
would suggest you use ndd to turn them off.
can any other system ping the system? the usual song and dance about
being up on the latest transport patch (and dependencies) likely
applies, though I'm hard-pressed to see on the surface at least a
connection between running tcpdump and the ICMP module becoming
unresponsive.
if you subsequently shut-off tcpdump, do the pings start to work?
if you down and up the interface (probably best done from the console)
do the pings start to work? does netstat -p icmp show a higher rate of
arriving icmp messages with tcpdump on than off? finally if you have
more than one interface (logical or physical) do you disable ip
forwarding?
rick jones
--
ftp://ftp.cup.hp.com/dist/networking/misc/rachel/
these opinions are mine, all mine; HP might not want them anyway... :)
feel free to email, OR post, but please do NOT do BOTH...
my email address is raj in the cup.hp.com domain...
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
