search for: icmp

...al box that gets duplicates or the guest? > What happens when you ping the other way? > What does tcpdump show on both sides when you ping? ping -c 1 guest (10.100.100.74) -> external (10.91.73.252) (these are on the same subnet) guest: 15:29:51.342545 IP 10.100.100.74 > 10.91.73.252: ICMP echo request, id 64778, seq 1, length 64 15:29:51.342716 IP 10.91.73.252 > 10.100.100.74: ICMP echo reply, id 64778, seq 1, length 64 15:29:51.342734 IP 10.91.73.252 > 10.100.100.74: ICMP echo reply, id 64778, seq 1, length 64 15:29:51.342799 IP 10.91.73.252 > 10.100.100.74: ICMP echo repl...

...al box that gets duplicates or the guest? > What happens when you ping the other way? > What does tcpdump show on both sides when you ping? ping -c 1 guest (10.100.100.74) -> external (10.91.73.252) (these are on the same subnet) guest: 15:29:51.342545 IP 10.100.100.74 > 10.91.73.252: ICMP echo request, id 64778, seq 1, length 64 15:29:51.342716 IP 10.91.73.252 > 10.100.100.74: ICMP echo reply, id 64778, seq 1, length 64 15:29:51.342734 IP 10.91.73.252 > 10.100.100.74: ICMP echo reply, id 64778, seq 1, length 64 15:29:51.342799 IP 10.91.73.252 > 10.100.100.74: ICMP echo repl...

Hi Lars, I have no experience to use tcpdump, here is the output from TCPdump for your reference. Any idea? Use my home PC to ping company PC 01:00:25.154706 ethertype IPv4, IP 192.168.1.2 > 10.0.0.2: ICMP echo request, id 1, seq 17, length 40 01:00:25.154706 IP 192.168.1.2 > 10.0.0.2: ICMP echo request, id 1, seq 17, length 40 01:00:25.154706 IP 192.168.1.2 > 10.0.0.2: ICMP echo request, id 1, seq 17, length 40 01:00:25.155177 IP 192.168.1.1 > 192.168.1.2: ICMP 10.0.0.2 protocol 1 port 1978...

Hi All, I am trying to setup the site-to-site VPN with TINC for connect my home network to company network. Here is the IP allocation and configuration for your reference. Home PC (192.168.1.2) ?-----? Home (OPENWRT Router, 192.168.1.1, 10.0.0.1) ?----------------? INTERNET ?-------------? COMPANY (Windows 7 PC,192.168.2.1, 10.0.0.2) ?------------? COMPANY (SERVER ZONE) ?----? SERVER A

...b---- 41.9 netbsdhvm.born2b3.net 7 4096 2 -b---- 17.6 opensolarishvm.born2b3.net 3 4096 2 -b---- 179.6 # --- Pings from *centos-hvm* to dom0 interface*no ip-traffic on peth0* # --- root@xen411dom0:/ftp/HVM# tcpdump ''icmp[icmptype] = icmp-echo and icmp[icmptype] != icmp-echoreply'' tcpdump: WARNING: peth0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on peth0, link-type EN10MB (Ethernet), capture size 65535 bytes ^C 0 packets captured 6 packet...

hi i have a problem with my icmp, i have a router that performs nat. i cannot ping to internet hosts from more than one stations situated behind NAT at once. if i want to ping from another station i have to stop the ping that was initiated from the first host, and after a few seconds i can ping from another station.i've checke...

Hi, I just install Mandrake Linux 9.0 and it use shorewall. My first impression are extremily positive. But I simply can''t ping outside my machine. I verify that my route table is ok. It just cant''t ping in the same network! :( Any sugestions? # iptables -L | grep icmp ACCEPT icmp -- anywhere anywhere state NEW,RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp echo-request icmpdef icmp -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp echo-request AC...

...Kb) TX bytes:263558 (257.3 Kb) # brctl show (reduced output) bridge name bridge id STP enabled interfaces intbr1 8000.feffffffffff no vif2.1 vif9.1 When we send an ICMP-packet with 6400 data-bytes (ping -s 6400 -c 1 192.168.39.1) from Linux-guest connected to "vif9.1" to the other linux-guest connected to "vif2.1" we see with tcpdump connected to intbr1, that some instance (intbr1? vif9.1) defragmented the 5 ip-packets from vif9.1 into 1 ip-pac...

Hello, while checking new mtu9k-setup, I discovered that ping has some odd behaviour. If I use payloadsize > 4067, every 2nd icmp-echo-request seems to be malformed: ping -s 4068 -D 10.5.49.65 1st: 12:21:09.048447 IP 10.5.49.126 > 10.5.49.65: ICMP echo request, id 46597, seq 0, length 4076 0x0000: 4500 1000 0f2d 4000 4001 a507 0a05 317e 2nd: 12:21:10.052891 IP 10.5.49.126 > 10.5.49.65: icmp 0x0000:...

Hi all, I have a question regarding a transformation that is carried out in InstCombine, which has been introduced by r48715. It unfolds expressions of the form `zext(or(icmp, (icmp)))` to `or(zext(icmp), zext(icmp)))` to expose pairs of `zext(icmp)`. In a subsequent iteration these `zext(icmp)` pairs could then (possibly) be optimized by another optimization (which has already been there before r48715), to replace them by bitwise or integer operations. The code in ques...

...ll system while pinging from the dmz system. As you told there is a problem. Now what I need to do. I attach herewith the tcpdump output. Please reply. Regards Siva -------------- next part -------------- 23:00:13.367010 0:c0:4f:4d:fd:a4 0:3:40:90:2:9c ip 74: 203.124.152.67 > 203.124.152.65: icmp: echo request 23:00:13.401100 0:3:40:90:2:9c 0:5:5d:4a:3b:7c ip 74: 203.124.152.65 > 203.124.152.67: icmp: echo reply 23:00:14.867321 0:c0:4f:4d:fd:a4 0:3:40:90:2:9c ip 74: 203.124.152.67 > 203.124.152.65: icmp: echo request 23:00:14.901293 0:3:40:90:2:9c 0:5:5d:4a:3b:7c ip 74: 203.124.152.65...

...-m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] " -A ufw-after-logging-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK] " -A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A ufw-before-forward -p icmp -m icmp --icmp-type 3 -j ACCEPT -A ufw-before-forward -p icmp -m icmp --icmp-type 4 -j ACCEPT -A ufw-before-forward -p icmp -m icmp --icmp-type 11 -j ACCEPT -A ufw-before-forward -p icmp -m icmp --icmp-type 12 -j ACCEPT -A ufw-before-forward -p icmp -m icmp --icmp-type 8 -j ACCEPT -A ufw-before-for...

...se correct me in case I'm thinking in the wrong direction. > Am 21.07.2016 um 18:51 schrieb Sanjay Patel <spatel at rotateright.com>: > > I've been fixing similar problems recently (eg, https://llvm.org/bugs/show_bug.cgi?id=28476 ). I think your example (the test in zext-or-icmp.ll) is another missed application of DeMorgan's Law: > > char foo(char a, char b) { > return (((a & 1) == 0) | (b == 0)); > } > > char goo(char a, char b) { > return !(((a & 1) != 0) & (b != 0)); > } > > Make sure I didn't botch that translat...

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want,...

...when trying to stop the flow in one direction on the FORWARD chain?? Can someone please help?? Below is the testing done so far. eth1 <---> BRIDGE <---> eth0 # Block (eth0 ---> eth1) - blocks both directions and not just one?? iptables -A FORWARD -m physdev --physdev-out eth1 -p icmp -j DROP # Block (eth0 <--- eth1) - blocks both directions and not just one?? iptables -A FORWARD -m physdev --physdev-out eth1 -p icmp -j DROP # Block (eth0 ---> BRIDGE) - working iptables -A INPUT -m physdev --physdev-in eth0 -p icmp -j DROP # Block (eth0 <--- BRIDGE) - working iptable...

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=37 Summary: icmp match defaults to --icmp-type icmp-echo-reply Product: iptables userspace Version: 1.1.2 Platform: other OS/Version: other Status: NEW Severity: normal Priority: P2 Component: iptables AssignedTo: laforge@netfi...

...nntrack --ctstate RELATED,ESTABLISHED -j ACCEPT - -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set - --name BLOCKED --rsource - -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent - --update --seconds 600 --hitcount 4 --name BLOCKED --rsource -j DROP - -A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT - -A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT - -A INPUT -p icmp -m icmp --icmp-type 12 -j ACCEPT - -A INPUT -p tcp -m tcp --dport 113 --tcp-flags FIN,SYN,RST,ACK SYN -j REJECT --reject-with tcp-reset - -A INPUT -p gre -j ACCEPT - -A INPUT -p esp -j ACCEPT - -A...

..., im running a 3interface inet, dmz, loc. i have some public ip addresses. one public address is the router of the provider, the second one is the linux box running shorewall. all other public interfaces are on the dmz nic with proxy-arp. now whenever i do a traceroute (the dmz boxes are windows, icmp traceroute) the very first hop gets timeout/stars, then the router of the provider follows as second hop and everything else after that is ok. when i do a second traceroute directly after that, this doesnt happen, but the dmz ip address of the linux shorewall box appears just fine as the first hop...

...|ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-02-03 16:52 ------- Incompatible solutions: 1) have a special value meaning "no icmp type specified", for example -1 (0xFF) would mean "any" 2) create a possibility to match a range of icmp types, and initialize the range to [0,max_icmp_type] 3...

I am managing two Xen containers which are exhibiting a spooky behavior. There are intermittent network failures that affect only the VM''s, and not dom0. This exhibits itself as problems with nfs locks, snmp, and even icmp ping. The arp tables look normal on both the dom0 and the guest. However, it is definitely arp related. Causing arp traffic of any sort results the problem curing itself for a few seconds. The pings go out, reach the destination, and are replied to. The missing replies don''t reach tcp...