----- Original Message -----
From: "Sam Sgro" <sam_at_freeswan.org>
To: "Michael Dundas" <mnd_at_dundas.org>
Cc: <users_at_lists.freeswan.org>
Sent: Friday, June 21, 2002 7:04 PM
Subject: Re: Fw: [Users] Fw: Unable to Ping
> -----BEGIN PGP SIGNED MESSAGE-----
>
>
> On Thu, 20 Jun 2002, Michael Dundas wrote:
>
> > 16:15:48.003103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x4)
> > 16:15:48.013103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x4)
> > 16:15:48.203103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x5)
> > 16:15:48.203103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x5)
> > 16:15:49.013103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x6)
> > 16:15:49.013103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x6)
> > 16:15:49.693103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x7)
> > 16:15:49.793103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x7)
> > 16:15:51.203103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x8)
> > 16:15:51.203103 209.226.84.237 > 209.226.84.238:
ESP(spi=0x0a6b5147,seq=0x8)
>
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
> > 16:15:43.193103 209.226.84.238 > 209.226.84.237: icmp: 209.226.84.238
udp
> > port netbios-ns unreachable [tos 0xc0]
> > 16:15:44.693103 209.226.84.237.netbios-ns > 209.226.84.238.netbios-ns:
NBT
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
> > 16:15:44.693103 209.226.84.238 > 209.226.84.237: icmp: 209.226.84.238
udp
> > port netbios-ns unreachable [tos 0xc0]
> > 16:15:45.803103 209.226.84.237 > zeus.isa: icmp: echo request
> > 16:15:46.193103 209.226.84.237.netbios-ns > 209.226.84.238.netbios-ns:
NBT
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
> > 16:15:46.193103 209.226.84.238 > 209.226.84.237: icmp: 209.226.84.238
udp
> > port netbios-ns unreachable [tos 0xc0]
> > 16:15:47.013103 209.226.84.237 > zeus.isa: icmp: echo request
> > 16:15:48.013103 209.226.84.237 > zeus.isa: icmp: echo request
> > 16:15:48.203103 209.226.84.237.netbios-ns > 192.168.100.0.netbios-ns:
NBT
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
> > 16:15:49.013103 209.226.84.237 > zeus.isa: icmp: echo request
> > 16:15:49.793103 209.226.84.237.netbios-ns > 192.168.100.0.netbios-ns:
NBT
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
> > 16:15:51.203103 209.226.84.237.netbios-ns > 192.168.100.0.netbios-ns:
NBT
> > UDP PACKET(137): QUERY; REQUEST; UNICAST
>
> I've got these two lined up; it seems as if the packet IS being decrypted
> correctly. We do see an eroute between 209.226.84.237 and the private
> network. How are you pinging? I'm trying to decipher what "zeus.isa" is;
you
> are just issuing a simple "ping 192.169.100.40" or some such command from
> 209.226.84.237, correct?
Correct, basically W2K, goto command prompt and type 'ping 192.168.100.2'.
That is 'zeus.isa'. It is an internal server.
>
> Do the machines ever receive the packet on the private network? You've
posted
> tcpdumps now from eth1 and ipsec0; do you ever see coincident activity on
> eth0?
I actually ran a trace on the private network and no they don't see the
'echo request' at all. Mind you that was a couple of traces ago.
I'll repeat with a trace of the eth0 and see if there is anything.
/Mike
>
> Sam Sgro
> sam_at_freeswan.org
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.3ia
> Charset: noconv
> Comment: For the matching public key, finger the Reply-To: address.
>
> iQCVAwUBPROxFEOSC4btEQUtAQEbmwP+OVeunKnDId6xUVEM1Uu9e0IsyvDDAED2
> ZkUO/X0u3h+1PWeLszf4k2x7FqLjrZ6xDtybvL+XmuQZDFUq+PO+FLx2UX3LuKqo
> hbNr8Ec18NcTJUNG5FMsQkV0p82sl5Okfw6PYg69lzTSM1rgxhMR1a5pcrNTvvyo
> 4GDarT5dXvI=
> =2A0G
> -----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:16 CEST