Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Oct 2010 21:30:43 +1100 (EST)
From:      Ian Smith <smithi@nimnet.asn.au>
To:        Thomas Sevestre <thomas.sevestre@tcare.fr>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Tcpdump showing ghost traffic
Message-ID:  <20101022205444.V9562@sola.nimnet.asn.au>
In-Reply-To: <B73BC98A-2B1A-4100-A031-B81BA1AD0B14@tcare.fr>
References:  <4EC6D4D7-3D86-45A1-B804-96F548CB5254@tcare.fr> <4CC072A3.1090402@freebsd.org> <B73BC98A-2B1A-4100-A031-B81BA1AD0B14@tcare.fr>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--0-883686648-1287743443=:9562
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: 8BIT

On Fri, 22 Oct 2010, Thomas Sevestre wrote:
 > 							Le 21 oct. 10 à
 > 19:04, Julian Elischer a écrit :
 > 
 > > On 10/21/10 8:26 AM, Thomas Sevestre wrote:
 > > > Hi all,
 > > > 
 > > > I'm using freebsd 8 as a router. Say I have a sis0 interface. The
 > > > interface is up and negociated, Ethernet LEDs are fine.
 > > > Sometimes tcpdump shows traffic on the interface (tcpdump -lni sis0) but
 > > > traffic LEDs doesn't blink and there is nothing going out of the router.
 > > > 
 > > > Do you have any idea of what the problem could be?
 > > > May be a link-layer driver bug?
 > > 
 > > who is the traffic for and from?
 > 
 > For instance, the router is pinging some address on his LAN. In this case I
 > had a machine wired directly to the router.
 > By the way, it is not a firewall issue, packets wasn't blocked.

tcpdump is in promiscuous mode, also seeing any traffic visible on the 
wire for other than your MAC address.  Is there any of that?  Would the 
LEDs flash when receiving that?  Is the LAN off a switch, or a hub?

Details like ifconfig and tcpdump output might help, obscured as needed.

cheers, Ian
--0-883686648-1287743443=:9562--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20101022205444.V9562>