From owner-freebsd-stable@FreeBSD.ORG Tue Jan 4 11:26:47 2005 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9C10916A4CE for ; Tue, 4 Jan 2005 11:26:47 +0000 (GMT) Received: from mail28.syd.optusnet.com.au (mail28.syd.optusnet.com.au [211.29.133.169]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0131543D1D for ; Tue, 4 Jan 2005 11:26:47 +0000 (GMT) (envelope-from PeterJeremy@optushome.com.au) Received: from cirb503493.alcatel.com.au (c211-30-75-229.belrs2.nsw.optusnet.com.au [211.30.75.229]) j04BQjmZ017695 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO); Tue, 4 Jan 2005 22:26:45 +1100 Received: from cirb503493.alcatel.com.au (localhost.alcatel.com.au [127.0.0.1])j04BQjxP037207; Tue, 4 Jan 2005 22:26:45 +1100 (EST) (envelope-from pjeremy@cirb503493.alcatel.com.au) Received: (from pjeremy@localhost)j04BQiUK037206; Tue, 4 Jan 2005 22:26:44 +1100 (EST) (envelope-from pjeremy) Date: Tue, 4 Jan 2005 22:26:44 +1100 From: Peter Jeremy To: Gerrit =?iso-8859-1?Q?K=FChn?= Message-ID: <20050104112644.GF34222@cirb503493.alcatel.com.au> References: <20050103101654.GA51270@pmp.uni-hannover.de> <20050103155826.0fed63ea@arc.pmp.uni-hannover.de> <20050103193026.GB34222@cirb503493.alcatel.com.au> <20050104101701.3a08b138.gerrit@pmp.uni-hannover.de> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20050104101701.3a08b138.gerrit@pmp.uni-hannover.de> User-Agent: Mutt/1.4.2i cc: freebsd-stable@freebsd.org Subject: Re: Strange networking problems after update 5.2.1->5.3 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jan 2005 11:26:47 -0000 On Tue, 2005-Jan-04 10:17:01 +0100, Gerrit Kühn wrote: >PJ> >ed0: flags=108843 mtu 1500 >PJ> > inet 130.75.117.37 netmask 0xffff0000 broadcast 130.75.255.255 >PJ> > ether 01:d4:ff:03:00:20 > >PJ> That's a multicast MAC address (the LSB of the first byte is 1). More > >Ok, I didn't know about this. Can you recommend any online resource where >those special things are documented? The definitive source is the IEEE 802.3 specifications which are available (free) from http://standards.ieee.org/getieee802/802.3.html If you're not trying to cure a bad case of insomnia, there are probably better overviews on the WEB but I can't quickly find them. >PJ> intelligent NICs will have an internal list of multicast MAC addresses >PJ> that they have been programmed to respond to and will ignore all other >PJ> multicast addresses (for dumber NICs, this checking should be in the >PJ> driver). This would explain the peculiar behaviour you are seeing. Upon reflection, my comments are wrong - the receiving NICs will be looking for (and typically ignoring) destination multicast frames. In your case, the source may[*] be multicast (though the response frames would be multicast). A more likely problem is that ARP packets generated by your system have the MAC address seen by the driver (as above) whereas the card is physically using it's correct address (as reported by 5.2.1) - and therefore remote systems will normally see the wrong address. You could confirm this by checking the ARP tables on some remote hosts within the same LAN and/or looking at "tcpdump -es" of some ARP packets. >Ok, 5.2.1 reported the following >Dec 28 10:15:05 lonestar kernel: ed1: address 00:e0:98:a2:a7:33, type >Linksys (16 bit) This address looks sane. >Dec 29 15:48:15 lonestar kernel: ed1: Ethernet address: 01:d4:ff:03:00:20 This address doesn't. Something in the driver is reading the wrong address. Off hand, I can't narrow it down right now. Unless someone recognizes the symptoms, you might need to look at the commits to the pccard and/or ed drivers between 5.2.1 and 5.3. [*] It's not clear whether the MAC address reported by ifconfig is actually the transmitted source MAC address. -- Peter Jeremy