RE: Hping/Ping

Hello again,
Also, if I use tethereal to sniff for icmp packets to the host I'm
pinging I see them all even though I am getting drops --

23 packets transmitted, 22 packets received, 4% packet loss

The last two lines of my tethereal --

45 22.214610 x.x.x.x -> y.y.y.y ICMP Echo (ping) request
46 22.215133 y.y.y.y -> x.x.x.x ICMP Echo (ping) reply

46/2 (request/reply) = 23. So 23 packets actually went out and returned, yet
I still get drops?

Thanks again
Dave

-----Original Message-----
From: Dave Raven [mailto:dave@xxxxxxxxxxxx]
Sent: Tuesday, February 26, 2008 6:21 PM
To: 'freebsd-net@xxxxxxxxxxx'
Subject: Hping/Ping

Hi all,
I have a problem where my machine is dropping packets and pings
after a few days of running (under load). The reason I'm mailing the -net
list is because I seem to have tracked down something I'm just not sure
where to look now. If I use ping I get 5% drops --

872 packets transmitted, 827 packets received, 5% packet loss
round-trip min/avg/max/stddev = 0.168/2.263/357.140/20.485 ms

If I use hping (to the exact same ip with icmp as well) I get none --

875 packets tramitted, 875 packets received, 0% packet loss
round-trip min/avg/max = 0.2/2.5/357.2 ms

Is there some buffer filling up? Where can I look to try get more
information. Any help/suggestions would be muchly appreciated

Thanks
Dave

_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: ICMP question
    ... All systems from the same network, ... >is that the ICMP packets coming to my firewall are actually ... >of these pings originate from *.cirn.net. ...
    (Security-Basics)
  • Re: Linux Fedora Core 2 Firewall
    ... if you want to put some time into building a firewall you can do one tailored just to your needs. ... I'm a build it myself guy (I created the firewalls for the usenet and mail servers used by SBC for 1995-2005) but if you don't want to put the time into it, ... - put the rule to ACCEPT connections in stae ESTABLISHED very early in your rules, as the majority of packets usually match that rule and don't have to run through a bunch of extra rules. ... There are ways to attach via other icmp packets, such as redirect, drop them. ...
    (comp.sys.intel)
  • Re: Clever firewall rules
    ... then some systems will pause on identd lookups. ... IMHO droping icmp packets is not correct, better way should be rejecting ...
    (Focus-Linux)
  • Re: [SLE] Internet Problem Over LAN
    ... "traceroute" uses UDP ... packets to find out hops in between utilizing TTL. ... Not ICMP packets. ... allow any high port UDP packets to go ...
    (SuSE)
  • Re: iptables newbie
    ... > accept input packets with source 127.0.0.1 and output packets with ... Brad Olin showed us a way to control outgoing icmp packets ... > be arranged to send it to one of the ports being allowed. ...
    (comp.os.linux.security)