Moriah
Advocate
Joined: 27 Mar 2004
Posts: 2383
Location: Kentucky
|
 Posted: Thu Oct 06, 2005 3:03 am Post subject: wireless xp laptop dropping out |
 |
|
I am running a pair of wireless xp laptops on a mostly otherwise gentoo network. There are 2 laptops on wireless: ruth and abraham. There are also 2 xp workstation on wired ethernet: gabriel and elisha. All the other boxes are running gentoo linux.
The wired boxes have nailed-up static ip addresses in their conf files, but the 2 laptops (different brands) run xp and get their ip addresses from a dhcp server running on a gentoo box. The dhcp server is using bootp to associate a single static ip with the mac address of each laptop. This same gentoo box is also running samba and cups to permit the laptops to access the network printers.
One laptop, a Compaq named abraham, works great, but the other, a Toshiba named ruth, drops out after a few hours (time varies) and then reconnects. This is extremely annoying to the user of that laptop, and even more to me (the sysadm) when it does this in the middle of a nightly backup run. Besides, it just shouldn't be doing that. 
In an effort to see what was going on, I ran tcpdump, and blocked the ssh and vnc traffic to the offending laptop, but otherwise captured all traffic to and from that laptop. Here is what I see shortly before the drop-out: | Code: | 21:14:44.665154 arp who-has ezra tell ruth
21:14:44.665212 arp reply ezra is-at 00:40:05:38:fc:46
21:18:16.932713 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:24:47.627842 arp who-has ezra tell ruth
21:24:47.627914 arp reply ezra is-at 00:40:05:38:fc:46
21:27:36.229445 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST
21:27:36.229983 arp who-has ruth tell elisha
21:27:36.282361 arp reply ruth is-at 00:11:95:7f:bd:51
21:27:36.282548 IP elisha.netbios-ns > ruth.netbios-ns: NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST
21:27:36.284077 IP ruth.1391 > elisha.netbios-ssn: S 143423111:143423111(0) win 16384 <mss 1460,nop,nop,sackOK>
21:27:36.284482 IP elisha.netbios-ssn > ruth.1391: S 239800334:239800334(0) ack 143423112 win 65535 <mss 1360,nop,nop,sackOK>
21:27:36.285625 IP ruth.1391 > elisha.netbios-ssn: P 1:73(72) ack 1 win 17680 NBT Packet
21:27:36.286161 IP elisha.netbios-ssn > ruth.1391: P 1:5(4) ack 73 win 65463 NBT Packet
21:27:36.287493 IP ruth.1391 > elisha.netbios-ssn: P 73:210(137) ack 5 win 17676 NBT Packet
21:27:36.290458 IP elisha.netbios-ssn > ruth.1391: P 5:94(89) ack 210 win 65326 NBT Packet
21:27:36.292119 IP ruth.1391 > elisha.netbios-ssn: P 210:416(206) ack 94 win 17587 NBT Packet
21:27:36.294330 IP elisha.netbios-ssn > ruth.1391: P 94:359(265) ack 416 win 65120 NBT Packet
21:27:36.297452 IP ruth.1391 > elisha.netbios-ssn: P 416:678(262) ack 359 win 17322 NBT Packet
21:27:36.306473 IP elisha.netbios-ssn > ruth.1391: P 359:480(121) ack 678 win 64858 NBT Packet
21:27:36.307916 IP ruth.1391 > elisha.netbios-ssn: P 678:760(82) ack 480 win 17201 NBT Packet
21:27:36.308964 IP elisha.netbios-ssn > ruth.1391: P 480:540(60) ack 760 win 64776 NBT Packet
21:27:36.310330 IP ruth.1391 > elisha.netbios-ssn: P 760:882(122) ack 540 win 17141 NBT Packet
21:27:36.313975 IP elisha.netbios-ssn > ruth.1391: P 540:675(135) ack 882 win 64654 NBT Packet
21:27:36.315379 IP ruth.1391 > elisha.netbios-ssn: P 882:925(43) ack 675 win 17006 NBT Packet
21:27:36.315873 IP elisha.netbios-ssn > ruth.1391: P 675:718(43) ack 925 win 64611 NBT Packet
21:27:36.317119 IP ruth.1391 > elisha.netbios-ssn: P 925:964(39) ack 718 win 16963 NBT Packet
21:27:36.317669 IP elisha.netbios-ssn > ruth.1391: P 718:757(39) ack 964 win 64572 NBT Packet
21:27:36.319080 IP ruth.1391 > elisha.netbios-ssn: F 964:964(0) ack 757 win 16924
21:27:36.319531 IP elisha.netbios-ssn > ruth.1391: F 757:757(0) ack 965 win 64572
21:27:36.320591 IP ruth.1391 > elisha.netbios-ssn: . ack 758 win 16924
21:30:18.508327 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:34:23.026973 arp who-has aaron tell ruth
21:34:23.027104 arp reply aaron is-at 00:0c:41:25:6b:80
21:34:23.034652 IP ruth > aaron: icmp 13: echo request seq 3840
21:34:23.035410 IP aaron > ruth: icmp 13: echo reply seq 3840
21:34:24.360689 arp who-has aaron tell ruth
21:34:24.360736 arp reply aaron is-at 00:0c:41:25:6b:80
21:34:24.817745 arp who-has ezra tell ruth
21:34:24.817809 arp reply ezra is-at 00:40:05:38:fc:46
21:34:25.565014 arp who-has aaron tell ruth
21:34:25.565063 arp reply aaron is-at 00:0c:41:25:6b:80
21:34:25.573279 IP ruth > aaron: icmp 13: echo request seq 4352
21:34:25.573453 IP aaron > ruth: icmp 13: echo reply seq 4352
21:34:30.568821 arp who-has ruth tell aaron
21:34:30.570458 arp reply ruth is-at 00:11:95:7f:bd:51
21:36:24.179049 IP ruth > aaron: icmp 13: echo request seq 4864
21:36:24.179246 IP aaron > ruth: icmp 13: echo reply seq 4864
21:36:24.386086 arp who-has aaron tell ruth
21:36:24.386145 arp reply aaron is-at 00:0c:41:25:6b:80
21:36:24.392617 IP ruth > aaron: icmp 13: echo request seq 5120
21:36:24.392759 IP aaron > ruth: icmp 13: echo reply seq 5120
21:36:25.680923 IP ruth > aaron: icmp 13: echo request seq 5376
21:36:25.681097 IP aaron > ruth: icmp 13: echo reply seq 5376
21:36:26.682218 IP ruth > aaron: icmp 13: echo request seq 5632
21:36:26.682382 IP aaron > ruth: icmp 13: echo reply seq 5632
21:36:29.388436 arp who-has ruth tell aaron
21:36:30.388173 arp who-has ruth tell aaron
21:36:31.387918 arp who-has ruth tell aaron
21:36:32.387658 arp who-has ruth tell aaron
21:36:33.387401 arp who-has ruth tell aaron
21:36:34.387157 arp who-has ruth tell aaron
21:36:44.259379 arp who-has ezra tell ruth
21:36:44.259461 arp reply ezra is-at 00:40:05:38:fc:46
21:37:39.412515 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:37:42.412685 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:40:09.455663 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:40:13.456121 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:40:13.478178 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:40:13.502317 arp who-has ruth tell ruth
21:40:14.488303 arp who-has ruth tell ruth
21:40:15.488570 arp who-has ruth tell ruth
21:40:16.522769 IP ruth > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
21:40:16.538484 IP ruth.1406 > 239.255.255.250.1900: UDP, length: 133
21:40:16.590846 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:17.317143 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:17.472137 IP ruth > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
21:40:18.067593 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:18.818041 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:19.532924 IP ruth.1406 > 239.255.255.250.1900: UDP, length: 133
21:40:19.567785 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:20.318908 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:21.069352 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:21.819811 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:22.533704 IP ruth.1406 > 239.255.255.250.1900: UDP, length: 133
21:40:22.570961 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:22.572774 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:23.320668 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:23.344978 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:24.071130 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:24.084122 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:24.821562 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:24.850513 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:25.576569 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:25.579682 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:27.076801 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:28.577675 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:30.078565 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:31.579571 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:32.581092 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:33.581113 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:34.581350 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:35.582443 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:36.331001 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:37.081451 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:37.831927 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:38.582444 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:39.332772 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:40.083212 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:40.833664 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:40:41.585048 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:41.590479 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:40:41.610980 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:41:03.897255 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:41:11.898292 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:41:39.476461 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:41:43.477004 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:41:43.490330 IP daniel.bootps > ruth.bootpc: BOOTP/DHCP, Reply, length: 300
21:41:43.503523 arp who-has ruth tell ruth
21:41:43.510388 arp who-has ruth tell ruth
21:41:44.511207 arp who-has ruth tell ruth
21:41:45.531833 IP ruth.1426 > 239.255.255.250.1900: UDP, length: 133
21:41:45.546979 IP ruth > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
21:41:45.558156 IP ruth.1430 > 239.255.255.250.1900: UDP, length: 133
21:41:45.588523 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:46.083444 IP ruth > IGMP.MCAST.NET: igmp v3 report, 1 group record(s)
21:41:46.339781 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:47.090229 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:47.840671 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:48.561656 IP ruth.1430 > 239.255.255.250.1900: UDP, length: 133
21:41:48.590295 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:49.341536 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:50.092004 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:50.842443 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:51.562376 IP ruth.1430 > 239.255.255.250.1900: UDP, length: 133
21:41:51.592378 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:51.594269 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:52.343326 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:52.378346 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:53.093768 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:53.130514 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:53.844201 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:53.858086 IP ruth.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCAST
21:41:54.596763 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:41:54.603168 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:41:56.097450 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:41:57.598312 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:41:59.099209 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:42:00.600189 IP ruth.netbios-dgm > 192.168.1.255.netbios-dgm: NBT UDP PACKET(138)
21:45:35.390054 arp who-has ruth tell ezra
21:45:36.390091 arp who-has ruth tell ezra
21:45:37.390086 arp who-has ruth tell ezra
21:45:38.390067 arp who-has ruth tell ezra
21:45:39.390052 arp who-has ruth tell ezra
21:45:40.390056 arp who-has ruth tell ezra
21:45:41.860079 arp who-has ruth tell ezra
21:45:42.860071 arp who-has ruth tell ezra
21:45:43.860051 arp who-has ruth tell ezra
21:45:53.700111 arp who-has ruth tell ezra
21:45:54.700070 arp who-has ruth tell ezra
(etc...) |
It looks to me like ruth (the laptop with the problem) starts to get confused around 21:40:13.502317 arp who-has ruth tell ruth, since I cannot imagine why poor ruth would be asking for its own mac address!
And why is ruth periodically trying to ping the other boxes?
Am I on the right track here, or is something else going on?
And does anybody know how to fix this?
Thanks!  |
|
Networking & Security
