View Single Post
  #5   (View Single Post)  
Old 27th October 2009
vi5in's Avatar
vi5in vi5in is offline
Real Name: Vivin Paliath
Port Guard
 
Join Date: May 2008
Location: Arizona
Posts: 17
Default

Thanks jggimi!

I don't have pf or ipfw running (unless it starts up by default?? How do I check?). So I don't think it's a firewall issue. The odd thing is that on one machine I have a brand-new install and so I'm running on default settings. So I don't see why it shouldn't respond to connections.

Here's my rc.conf (network settings):

Code:
defaultrouter="209.x.y.54"
hostname="andromeda.is-a-geek.net"
ifconfig_fxp0="inet 209.x.y.50  netmask 255.255.255.248"
ifconfig_rl0="DHCP"
I ran tcpdump, while trying to connect to the machine using this site (http://www.uptimeinspector.com/test-...onnection.html). The Linux machine responds fine to this. Here is what I got from tcpdump:

Code:
12:15:18.154543 arp who-has andromeda.is-a-geek.net tell 209.x.y.54
12:15:18.154568 arp reply andromeda.is-a-geek.net is-at 00:03:47:d3:55:4c (oui Unknown)
12:15:18.154702 IP 115.124.100.30.40174 > andromeda.is-a-geek.net.ssh: S 3999881339:3999881339(0) win 5840 <mss 1452,sackOK,timestamp 2442576604 0,nop,wscale 2>
12:15:21.146989 IP 115.124.100.30.40174 > andromeda.is-a-geek.net.ssh: S 3999881339:3999881339(0) win 5840 <mss 1452,sackOK,timestamp 2442579604 0,nop,wscale 2>
12:15:27.155046 IP 115.124.100.30.40174 > andromeda.is-a-geek.net.ssh: S 3999881339:3999881339(0) win 5840 <mss 1452,sackOK,timestamp 2442585604 0,nop,wscale 2>
12:15:39.147315 IP 115.124.100.30.40174 > andromeda.is-a-geek.net.ssh: S 3999881339:3999881339(0) win 5840 <mss 1452,sackOK,timestamp 2442597604 0,nop,wscale 2>
12:15:46.148323 arp who-has 209.x.y.52 tell 209.x.y.54
12:15:47.148305 arp who-has 209.x.y.52 tell 209.x.y.54
12:15:48.148238 arp who-has 209.x.y.52 tell 209.x.y.54
12:15:48.829373 IP 115.124.100.30.40285 > andromeda.is-a-geek.net.ssh: S 4038856357:4038856357(0) win 5840 <mss 1452,sackOK,timestamp 2442607286 0,nop,wscale 2>
12:15:51.829230 IP 115.124.100.30.40285 > andromeda.is-a-geek.net.ssh: S 4038856357:4038856357(0) win 5840 <mss 1452,sackOK,timestamp 2442610286 0,nop,wscale 2>
12:15:53.827959 arp who-has andromeda.is-a-geek.net tell 209.x.y.54
12:15:53.827985 arp reply andromeda.is-a-geek.net is-at 00:03:47:d3:55:4c (oui Unknown)
12:15:57.831359 IP 115.124.100.30.40285 > andromeda.is-a-geek.net.ssh: S 4038856357:4038856357(0) win 5840 <mss 1452,sackOK,timestamp 2442616286 0,nop,wscale 2>
12:16:09.829144 IP 115.124.100.30.40285 > andromeda.is-a-geek.net.ssh: S 4038856357:4038856357(0) win 5840 <mss 1452,sackOK,timestamp 2442628286 0,nop,wscale 2>
For the linux machine (which does respond), I have:

Code:
12:11:19.711502 IP 115.124.100.30.39386 > tardis-2.local.ssh: S 3721978452:3721978452(0) win 5840 <mss 1452,sackOK,timestamp 2442315282 0,nop,wscale 2>
12:11:19.711537 IP tardis-2.local.ssh > 115.124.100.30.39386: S 3728537005:3728537005(0) ack 3721978453 win 5792 <mss 1460,sackOK,timestamp 10824721 2442315282,nop,wscale 6>
12:11:19.794368 IP 115.124.100.30.39386 > tardis-2.local.ssh: . ack 1 win 1460 <nop,nop,timestamp 2442315365 10824721>
12:11:19.805509 IP tardis-2.local.ssh > 115.124.100.30.39386: P 1:40(39) ack 1 win 91 <nop,nop,timestamp 10824745 2442315365>
12:11:19.887270 IP 115.124.100.30.39386 > tardis-2.local.ssh: . ack 40 win 1460 <nop,nop,timestamp 2442315458 10824745>
12:11:19.890600 IP 115.124.100.30.39386 > tardis-2.local.ssh: F 1:1(0) ack 40 win 1460 <nop,nop,timestamp 2442315461 10824745>
12:11:19.891645 IP tardis-2.local.ssh > 115.124.100.30.39386: F 40:40(0) ack 2 win 91 <nop,nop,timestamp 10824766 2442315461>
12:11:19.973379 IP 115.124.100.30.39386 > tardis-2.local.ssh: . ack 41 win 1460 <nop,nop,timestamp 2442315544 10824766>
12:11:24.706498 arp who-has tardis-2.local tell 209.x.y.54
I notice that there are no outgoing connections from andromeda. I don't know why that is.

Last edited by vi5in; 27th October 2009 at 10:05 PM.
Reply With Quote