Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
unbelivable ..strange things happening with my gentoo-SOLVED
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
adnoh
Tux's lil' helper
Tux's lil' helper


Joined: 21 Jul 2005
Posts: 120

PostPosted: Mon Aug 08, 2005 8:47 pm    Post subject: unbelivable ..strange things happening with my gentoo-SOLVED Reply with quote

hello @ all ....

I have a Gentoo box installed as dsl/router (ppp / rp-pppoe) for my Internet and a laptop as client ...

yesterday I wanted to go to surf a little bit and ... nothing happended. when i "ping"ed a little bit around i notized Response Times > 2 Sekonds (up to over 10 Sek !!!) not only from my laptop but from the router too !
I restarted the gentoo box, re-emerged ppp / rp-pppoe and the Kernel (2.6.11-gentoo-r6) but the problem was still there. I was wondering - if i used the laptop directly with my dsl hardware - all works fine, so the dsl-modem must be ok.

after hours of testing I notized one strange thing:
if I make any IN/OUTput in a SSH session from my laptop to the gentoo box my ping-time was realy good (~30 ms).
After playing a little bit arround i notized that every time I generate traffic on my ETH0 the I-Net (on ETH1 / PPP0) was fast. Can somewone explain me this? I'm doing a "ping -f 192.168.0.xxx" at the moment so I can write you and hope that someone can help me !!!!!

By the way ... we had last week a thunderstorm and thince then my sattelite receiver is going realy crazy too (while watching tv sometimes the screen blanks) - it has an embedded linux too ... 8O

Is it possible that there was a lightning strike or something that smashed my receiver and the Ethernet-card??
... or am I just Mr. LINUX-KILLER :twisted:

I thought I ' ve had seen a lot .. but this .... :?: :?: :?:
_________________
the german dude with the broken english


Last edited by adnoh on Mon Aug 22, 2005 8:35 pm; edited 1 time in total
Back to top
View user's profile Send private message
Kruegi
Guru
Guru


Joined: 09 Feb 2005
Posts: 406
Location: Clausthal-Zellerfeld; DE

PostPosted: Mon Aug 08, 2005 10:10 pm    Post subject: Reply with quote

Maybe it's just be a misconfiguration:
routing table? ARP table? interface configuration?
additional network configuration (like traffic shapping, firewall...)?

Thomas
Back to top
View user's profile Send private message
ph03n1x
l33t
l33t


Joined: 06 Feb 2003
Posts: 756

PostPosted: Mon Aug 08, 2005 11:34 pm    Post subject: Reply with quote

Switch everything off (also the modem) and see if it is still behaving that way.

Nearly all hardware sold nowadays is crap due to immense cost pressure. I've seen this a lot where modems etc. behaved really strange. If u lucky u can fix it by switching them off and on again. Sometimes it really needs a hard reset.
Back to top
View user's profile Send private message
adnoh
Tux's lil' helper
Tux's lil' helper


Joined: 21 Jul 2005
Posts: 120

PostPosted: Tue Aug 09, 2005 6:00 am    Post subject: Reply with quote

I reseted the modem and any hardware yesterday and nothing happened. With my Laptop directly connected to the modem everything works fine so I don't think that the modem is it. I didn't configure or install anything on the gentoo-box for maybe 1 month !!
I post you some Output i wonder'ed about:
the first 2 ip-addresses were nameservers from my provider. 84.58.0.1 and 84.58.46.44 were my externel ppp-ips that time
Code:

dom ppp # tracepath -n 192.50.140.252
 1:  84.58.46.44       0.455ms pmtu 1492
 1:  no reply
 1:  84.58.0.1       2999.878ms
 1:  84.58.0.1       2000.535ms
 1:  84.58.0.1       1000.710ms
 3:  no reply
 2:  145.254.0.73    2999.803ms !H
     Resume: pmtu 1492
dom ppp # tracepath -n 145.253.2.75
 1:  84.58.46.44       0.447ms pmtu 1492
 1:  no reply
 1:  84.58.0.1       2999.227ms
 1:  84.58.0.1       2000.041ms
 1:  84.58.0.1       1000.213ms
 3:  no reply
 2:  145.254.0.237   2999.756ms
 3:  145.254.18.254  2999.431ms
 3:  145.254.18.254  1999.965ms
 3:  145.254.18.254  1000.135ms
 5:  no reply
 4:  145.254.5.38    2999.867ms
 5:  145.254.5.78    2999.619ms
 5:  145.254.5.78    2000.062ms
 5:  145.254.5.78    1000.240ms
 7:  no reply
 6:  145.254.5.78    asymm  5 2999.753ms !H
     Resume: pmtu 1492

why doe's it do this loops ?? Here more output

Code:

dom ppp # route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
84.58.0.1       0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         84.58.0.1       0.0.0.0         UG    0      0        0 ppp0
dom ppp # ifconfig
eth0      Link encap:Ethernet  HWaddr 00:0A:E6:4E:3F:A0
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:20830 errors:0 dropped:0 overruns:0 frame:0
          TX packets:17920 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1760897 (1.6 Mb)  TX bytes:1879654 (1.7 Mb)
          Interrupt:11 Base address:0xd400

eth1      Link encap:Ethernet  HWaddr 00:40:F4:3B:71:50
          inet addr:192.168.0.2  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:798 errors:0 dropped:20 overruns:1 frame:0
          TX packets:843 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:84032 (82.0 Kb)  TX bytes:121666 (118.8 Kb)
          Interrupt:11 Base address:0xc000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:5 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1828 (1.7 Kb)  TX bytes:1828 (1.7 Kb)

ppp0      Link encap:Point-to-Point Protocol
          inet addr:84.58.46.44  P-t-P:84.58.0.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
          RX packets:73 errors:0 dropped:0 overruns:0 frame:0
          TX packets:76 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:20314 (19.8 Kb)  TX bytes:39057 (38.1 Kb)

[ebuild   R   ] net-dialup/rp-pppoe-3.5-r11  -X -tcltk 0 kB
[ebuild   R   ] net-dialup/ppp-2.4.3-r6  -activefilter -atm -dhcp -gtk +ipv6 -mppe-mppc +pam -radius 0 kB


Portage 2.0.51.22-r1 (default-linux/x86/2005.0, gcc-3.3.5-20050130, glibc-2.3.5-r0, 2.6.11-gentoo-r11-sh i686)
=================================================================
System uname: 2.6.11-gentoo-r11-sh i686 AMD Athlon(tm) XP 1800+
Gentoo Base System version 1.6.12
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-lang/python:     2.3.5, 2.4.1-r1
sys-apps/sandbox:    1.2.9
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils:  2.15.92.0.2-r8, 2.16.1
sys-devel/libtool:   1.5.18
virtual/os-headers:  2.6.11-r1
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=athlon-xp -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -march=athlon-xp -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig candy distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://pandemonium.tiscali.de/pub/gentoo/ ftp://gentoo.inode.at/source/ http://pandemonium.tiscali.de/pub/gentoo/"
LANG="de_DE"
LC_ALL="de_DE"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X509 alsa apache2 apm arts avi bash-completion berkdb bitmap-fonts cdr crypt cups emboss encode fam floppyboot foomaticdb fortran gd gdbm gif gpm imlib ipv6 jpeg kde libg++ libwww logrotate mad mikmod motif mp3 mpeg multislot multitarget mysql nagios-dns nagios-game nagios-ntp nagios-ping nagios-ssh nas ncurses neXt netboot nls ntlm oggvorbis opengl oss pam pdflib perl png python qt quicktime readline samba sasl sdl slang spell ssl svga tcpd tiff truetype truetype-fonts type1-fonts unicode userlocales utf8 xml2 xmms xv zlib userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LDFLAGS, LINGUAS, PORTDIR_OVERLAY


Hope someone can help me ... i don't understand why the internet (also that traffic from the box itself to the i-net) is fast when I generate traffic in my lan !! :?: :?:
_________________
the german dude with the broken english
Back to top
View user's profile Send private message
think4urs11
Bodhisattva
Bodhisattva


Joined: 25 Jun 2003
Posts: 6659
Location: above the cloud

PostPosted: Tue Aug 09, 2005 6:44 am    Post subject: Reply with quote

adnoh wrote:
eth0 Link encap:Ethernet HWaddr 00:0A:E6:4E:3F:A0
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0

eth1 Link encap:Ethernet HWaddr 00:40:F4:3B:71:50
inet addr:192.168.0.2 Bcast:192.168.0.255 Mask:255.255.255.0

bad idea to have two different NIC in the same subnet (at least in most cases it is...)
Sure that this is correct in your case?
_________________
Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself
Back to top
View user's profile Send private message
Anarcho
Advocate
Advocate


Joined: 06 Jun 2004
Posts: 2970
Location: Germany

PostPosted: Tue Aug 09, 2005 7:11 am    Post subject: Reply with quote

I would agree with Think4UrS11.
Look are your routing table and you see why it is not good to keep 2 NICs in one subnet.
Your routing table shows to routing entries for the same subnet with different outgoing NICs.

If I understand you correctly you only have the DSL Modem at eth1 and nothing else.
So you can take any IP-adress (to be more acurate: any of the reserved for homeuse) for this NIC, e.g. 192.168.55.66.
_________________
...it's only Rock'n'Roll, but I like it!
Back to top
View user's profile Send private message
adnoh
Tux's lil' helper
Tux's lil' helper


Joined: 21 Jul 2005
Posts: 120

PostPosted: Tue Aug 09, 2005 8:00 am    Post subject: Reply with quote

I changed the IP of ETH1 just while I was playing around yesterday. I tested with an other IP-Address too but it was the same situation.
My default (when the box is started) is to just bring the ETH1 to the UP-State without an ip-address which work(ed) well for me all the time...
any thips else ?? :roll:
_________________
the german dude with the broken english
Back to top
View user's profile Send private message
ph03n1x
l33t
l33t


Joined: 06 Feb 2003
Posts: 756

PostPosted: Tue Aug 09, 2005 8:39 am    Post subject: Reply with quote

This is very weird I've never seen something like this except when hardware was damaged. Maybe try with a different new nic.

And if that doesn't help maybe your box got rooted and some binaries affected? Just a guess since this problem seems really weird to me... maybe run chkrootkit and rkhunter to at least make sure the binaries are ok.
Back to top
View user's profile Send private message
think4urs11
Bodhisattva
Bodhisattva


Joined: 25 Jun 2003
Posts: 6659
Location: above the cloud

PostPosted: Tue Aug 09, 2005 6:13 pm    Post subject: Reply with quote

further things you can check

- ACPI enabled? if yes - try to disable
- duplex/speed settings - use ethtool or mii-tools depending on your NIC
- name server problems?
- any iptables rules?
- cabling? try to exchange the cable between DSL and eth1 with one 'known as working'
_________________
Nothing is secure / Security is always a trade-off with usability / Do not assume anything / Trust no-one, nothing / Paranoia is your friend / Think for yourself
Back to top
View user's profile Send private message
adnoh
Tux's lil' helper
Tux's lil' helper


Joined: 21 Jul 2005
Posts: 120

PostPosted: Fri Aug 19, 2005 9:05 am    Post subject: Solved Reply with quote

just 4 info:
it was a smashed nic ... strange effects .... :x
_________________
the german dude with the broken english
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum