[linux] Trouble s

[peto]

Vazena konfrencia!

Mam problem s dostupnostou host-ov napr. s IP 147.175.118.50, na ktory som
dostal aradu

> Dovody, preco by problem mohol byt u Vas:
> 1. Napadny rozdiel medzi pingom z Vasej vnutornej siete na uzol
147.175.111.1
> (bridg/rooter)
> 64 octets from 147.175.111.1: icmp_seq=0 ttl=255 time=0.9 ms
> a pingom alebo traceroutom na problemovy uzol:
> 1  minsk.elf.stuba.sk (147.175.111.128)  2997.346 ms !H  2998.991 ms !H
> (!H Host not reached)
> Toto su udaje z uzla 147.175.111.17
> PING 147.175.111.1 (147.175.111.1): 56 data bytes
> 64 bytes from 147.175.111.1: icmp_seq=0 ttl=255 time=0 ms
> 64 bytes from 147.175.111.1: icmp_seq=1 ttl=255 time=0 ms
> 64 bytes from 147.175.111.1: icmp_seq=2 ttl=255 time=0 ms
> PING 147.175.118.50 (147.175.118.50): 56 data bytes
> 64 bytes from 147.175.118.50: icmp_seq=0 ttl=63 time=3 ms
> 64 bytes from 147.175.118.50: icmp_seq=1 ttl=63 time=1 ms
> 64 bytes from 147.175.118.50: icmp_seq=2 ttl=63 time=1 ms
>
> Dovody, preco by nemusel byt problem u Vas.
> 1. Ak maju na cielovych pocitacoch urcitu kontrolu pre http/spoof (ale len
> v pripade konektivity na WWW sluzbu, pricom Vy hovorite, ze nefunguju
> aj ine sluzby, ping, traceroute (ICMP) tak by nohla byt disproporcia
> pri konektivite medzi NAT-ovanym tcp streamom (zdrojova adresa je adresa
> prelozena teda NAT-brana) a obsahom HTTP protokolu vyplnenom http
> clientom napriklad InternetExplorer, kde moze byt povodna neprekladana
> adresa.
> Toto sa da zistit pri spolupraci so spravcami problemovych uzlov, alebo
> s pouzitim http-proxy na NAT-ovom uzle, ktory bude skryvat vnutorne
> IP adresy. Za predpokladu ze Vam funguje konektivita z uzla priamo
> na problemove uzly!
> 2. Povodna poznamka o zakazovani pocitacov programom portsentry bola
urcena
> nie pre Vas pocitac, ale pre problemove uzly, zistenie je na spolupraci
> so spravcami uzlov, pre nich bol prikaz 'RedHat# iptables -L'.
>
> Dalsia diskusia, je podla mna uz len marenie casu, jedine co mozete
ovplyvnit,
> je spustit tcpdump na eth0 a eth1 pre uspesnu a neuspesnu http/tcp session


A vyslo mi

pre oba uzly

tcpdump -i eth1 -w problem dst host  147.175.111.11
aj
tcpdump -i eth1 -w problem dst host  147.175.118.50

davali ziadny packet v subore problem
pri ping na dst host
a

tcpdump -i eth0 -w problem dst host  147.175.111.11
aj
tcpdump -i eth0 -w problem dst host  147.175.118.50

davali tolko packet-ov ako bol pocet ping pokusov na echo v problem s tym,
ze mi pripadali hlavicky packet-ov na problemovy 147.175.118.50 kratsie ako
na bezproblemovy decef - tu je mozno problem zakopany, lebo v inom pripade
by sme skutocne boli zastaveny

pre
tcpdump -i eth0 -w problem src host  147.175.111.11

som dostal  do problem pocet packet-ov v ping-u na dst host

ale

tcpdump -i eth0 -w problem src host  147.175.118.50

davalo nic v subore problem.



Neviem mi niekto poradit?

S pozdravom
Peter Fodrek