SCIENTIFIC-LINUX-USERS Archives

December 2007

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
John Summerfield <[log in to unmask]>
Reply To:
John Summerfield <[log in to unmask]>
Date:
Sun, 2 Dec 2007 08:28:36 +0900
Content-Type:
text/plain
Parts/Attachments:
text/plain (42 lines)
Taylan Yetkin wrote:
> Both ping and traceroute  the host from fermi machines returns  
> success.  I need some time to understand the use of tcpdump.
> thanks,
> Taylan

There's a fair chance there's a problematic firewall rule. Some examples 
that can confuse the issue.

smtp connexions from some locations to my gateway are forward using a 
DNAT rule to an internal system. If the internal system's down, a "host 
unreachable" response goes back, but ping and traceroute would work.

When an unwelcome packet arrives at my gateway, I can choose to ignore 
it (DROP in iptables) or REJECT it. If I REJECT, I can add the excuse 
"icmp-host-unreachable."


A good start with tcpdump is something like this:

tcpdump -i eth0 -s 8888 host cvs-server

or use wireshark which has the same abilities and a GUI to guide the 
beginner.




-- 

Cheers
John

-- spambait
[log in to unmask]  [log in to unmask]
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)

ATOM RSS1 RSS2