Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Jan 2002 12:03:02 +0100
From:      "Reto Trachsel (NetModule)" <reto.trachsel@netmodule.com>
To:        "'net@freebsd.org'" <net@freebsd.org>
Subject:   RE: ICMP Redirect
Message-ID:  <F58DFF990DB0D411841D000102A7CD70090C01@tigris.pacific>

next in thread | raw e-mail | index | archive | help
Hi Crist

Here the Logs and outputs for you

Regards
	Reto

  # tcpdump -vvXs 1500 'icmp'

172.16.224.24 -> BSD Host
172.16.1.254 -> BSD Router

12:00:43.658869 172.16.1.254 > 172.16.224.24: icmp: redirect 172.24.0.2 to
host
172.16.1.252 for 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id
2963
2, len 84) (ttl 64, id 12073, len 56)
0x0000   4500 0038 2f29 0000 4001 1165 ac10 01fe        E..8/)..@..e....
0x0010   ac10 e018 0501 f014 ac10 01fc 4500 0054        ............E..T
0x0020   73c0 0000 4001 cea5 ac10 e018 ac18 0002        s...@...........
0x0030   0800 8337 bba5 1600                            ...7....
12:00:44.668972 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id
29634
, len 84)
0x0000   4500 0054 73c2 0000 4001 cea3 ac10 e018        E..Ts...@.......
0x0010   ac18 0002 0800 5f10 bba5 1700 4bae 463c        ......_.....K.F<
0x0020   475c 0200 0809 0a0b 0c0d 0e0f 1011 1213        G\..............
0x0030   1415 1617 1819 1a1b 1c1d 1e1f 2021 2223        .............!"#
0x0040   2425 2627 2829 2a2b 2c2d 2e2f 3031 3233        $%&'()*+,-./0123
0x0050   3435 3637                                      4567
12:00:44.669009 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 63, id
29634
, len 84)
0x0000   4500 0054 73c2 0000 3f01 cfa3 ac10 e018        E..Ts...?.......
0x0010   ac18 0002 0800 5f10 bba5 1700 4bae 463c        ......_.....K.F<
0x0020   475c 0200 0809 0a0b 0c0d 0e0f 1011 1213        G\..............
0x0030   1415 1617 1819 1a1b 1c1d 1e1f 2021 2223        .............!"#
0x0040   2425 2627 2829 2a2b 2c2d 2e2f 3031 3233        $%&'()*+,-./0123
0x0050   3435 3637                                      4567
12:00:44.669034 172.16.1.254 > 172.16.224.24: icmp: redirect 172.24.0.2 to
host
172.16.1.252 for 172.16.224.24 > 172.24.0.2: icmp: echo request (ttl 64, id
2963
4, len 84) (ttl 64, id 12154, len 56)
0x0000   4500 0038 2f7a 0000 4001 1114 ac10 01fe        E..8/z..@.......
0x0010   ac10 e018 0501 133c ac10 01fc 4500 0054        .......<....E..T
0x0020   73c2 0000 4001 cea3 ac10 e018 ac18 0002        s...@...........
0x0030   0800 5f10 bba5 1700                            .._.....
12:00:44.755969 172.16.1.254 > 172.16.1.22: icmp: redirect 172.24.0.2 to
host 17
2.16.1.252 for 172.16.1.22.139 > 172.24.0.2.1026: [|tcp] (DF) (ttl 128, id
53011
, len 1500) (DF) (ttl 64, id 12175, len 56)
0x0000   4500 0038 2f8f 4000 4001 b001 ac10 01fe        E..8/.@.@.......
0x0010   ac10 0116 0501 2f26 ac10 01fc 4500 05dc        ....../&....E...
0x0020   cf13 4000 8006 ccc7 ac10 0116 ac18 0002        ..@.............
0x0030   008b 0402 000b 1934                            .......4
12:00:44.756062 172.16.1.254 > 172.16.1.22: icmp: redirect 172.24.0.2 to
host 17
2.16.1.252 for 172.16.1.22.139 > 172.24.0.2.1026: [|tcp] (DF) (ttl 128, id
53267
, len 1500) (DF) (ttl 64, id 12176, len 56)
0x0000   4500 0038 2f90 4000 4001 b000 ac10 01fe        E..8/.@.@.......
0x0010   ac10 0116 0501 2972 ac10 01fc 4500 05dc        ......)r....E...
0x0020   d013 4000 8006 cbc7 ac10 0116 ac18 0002        ..@.............
0x0030   008b 0402 000b 1ee8

  $ netstat -rn

Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            172.16.1.1         UGSc        2      263   fxp0
127.0.0.1          127.0.0.1          UH          1        2    lo0
139.79.35.95       172.16.1.2         UGHS        0        0   fxp0
139.79.35.195      172.16.1.2         UGHS        0        0   fxp0
139.79.35.201      172.16.1.2         UGHS        0        0   fxp0
139.79.69/24       172.16.1.2         UGSc        0        0   fxp0
172.16             link#1             UC         79        0   fxp0
172.16.1.1         0:2:b9:1d:27:20    UHLW        2    11978   fxp0   1181
172.16.1.2         0:10:7b:cc:49:2f   UHLW        6     1642   fxp0   1166

... a lot of different hosts loke the two above ...

172.17/24          link#2             UC          0        0   fxp1 =>
172.17             172.17.10.250      UGSc        0    10326   fxp1
172.17.1/24        link#2             UC          0        0   fxp1
172.17.1.1         172.16.64.90       UGHS        0        0   fxp0
172.17.10/24       link#2             UC          1        0   fxp1
172.17.10.250      link#2             UHRLW       1        0   fxp1      7
172.18.1/24        link#2             UC          1        0   fxp1
172.18.1.52        0:e0:4c:39:a:36    UHLW        1        3   fxp1   1098
172.19             172.19.1.2         UGSc        1       83   fxp1
172.19.1/24        link#2             UC          1        0   fxp1
172.19.1.2         0:30:2b:0:28:84    UHLW        1        0   fxp1   1062
172.24             172.16.1.252       UGSc        0       10   fxp0
192.168.65.64/29   172.16.1.2         UGSc        0        0   fxp0
192.168.65.72/29   172.16.1.2         UGSc        0        0   fxp0

  $ ifconfig

fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 172.16.1.12 netmask 0xffff0000 broadcast 172.16.255.255
        inet 172.16.1.11 netmask 0xffff0000 broadcast 172.16.255.255
        inet 172.16.1.254 netmask 0xffff0000 broadcast 172.16.255.255
        inet 172.16.1.10 netmask 0xffff0000 broadcast 172.16.255.255
        ether 00:02:b3:86:12:38
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 172.18.1.10 netmask 0xffffff00 broadcast 172.18.1.255
        inet 172.19.1.10 netmask 0xffffff00 broadcast 172.19.1.255
        inet 172.17.10.10 netmask 0xffffff00 broadcast 172.17.10.255
        inet 172.17.0.1 netmask 0xffffff00 broadcast 172.17.0.255
        inet 172.17.1.10 netmask 0xffffff00 broadcast 172.17.1.255
        ether 00:02:b3:86:12:39
        media: Ethernet autoselect (100baseTX)
        status: active
-- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F58DFF990DB0D411841D000102A7CD70090C01>