News Group Posts

dropping route

From: Jeff Liebermann <jeffl@comix.santa-cruz.ca.us>
Subject: Re: route dropped when WAN goes down
References: <9d1ed006.0308201449.78798644@posting.google.com>
<0h88kv03uf3oa1coo3svfkttj8c2hd80o4@4ax.com>
<9d1ed006.0308210417.70895556@posting.google.com>
<02t9kvg4q53u13ra89jsdr52p6hb4ov0lj@4ax.com>
<9d1ed006.0308211321.71d7fc3d@posting.google.com>
<9d1ed006.0308211820.7b978859@posting.google.com> 
Date: Fri, 22 Aug 2003 04:57:43 GMT

On 21 Aug 2003 19:20:01 -0700, joe@nall.com (Joe Nall) wrote:

>joe@nall.com (Joe Nall) wrote in message news:<9d1ed006.0308211321.71d7fc3d@posting.google.com>...
>> They are running "route monitor" right now in the hope that it will
>> point to why the routing table is being modified.
>
>Here is their report on /etc/route -n monitor while the route was
>being dropped
>(hand typed):
>
>RTM_CHANGE: change metrics or flags
>len: 136            pid: 0          seq: 0          errno: 0
>
>flags: <GATEWAY, HOSTS, DONE>
>proto:      age: (number varies)
>sockaddres;<DST, GATEWAY>  (MY-IP) (IP2) (IP3)

>Where (MY-IP) is the IP address of my server (the one whose route is
>being dropped).  Any interpretation would be appreciated.

Not much useful there.  What is IP2 and IP3?  Are there two ethernet
cards in this box with ipredirects (IP forwarding) enabled between the
two cards?  My guess(tm) is that the change involved the route between
the two cards (IP2 and IP3).  Otherwise, could you dummy up some IP
addresses instead of variables?  My brain works better without the
symbolics.

>They swear routed is not running.

OK, let's assume that they're right.  (Assumption, the mother off all
screwups).  Any chance that they're running gated instead of routed?
It would also show up in the process table as:
  ps -ef | grep "gated"  (actually in.gated)
See:
  http://osr5doc.ca.sco.com:457/cgi-bin/man/man?gated+ADMN

Someone has to be running RIP.  So, let's go shopping for the culprit.
Run:
  ripquery -n gateway_IP_address
  ripquery -n local_IP_address
If you get "connection refused" or something similar, it's not running
RIP 2.  Also try the -1 flag in case it's running RIP 1.  Try every IP
address on your LAN.  Devices running either routed or gated will
respond.
  http://osr5doc.ca.sco.com:457/cgi-bin/man/man?ripquery+ADMN

-- 
# Jeff Liebermann   150 Felker St #D Santa Cruz CA 95060
# 831.336.2558 voice    http://www.LearnByDestroying.com
#                           jeffl@comix.santa-cruz.ca.us
# 831.421.6491 digital_pager  jeffl@cruzio.com     AE6KS

Comments?

Jump to Comments

Many of the products and books I review are things I purchased for my own use. Some were given to me specifically for the purpose of reviewing them. I resell or can earn commissions from the sale of some of these items. Links within these pages may be affiliate links that pay me for referring you to them. That's mostly insignificant amounts of money; whenever it is not I have made my relationship plain. I also may own stock in companies mentioned here. If you have any question, please do feel free to contact me.

Specific links that take you to pages that allow you to purchase the item I reviewed are very likely to pay me a commission. Many of the books I review were given to me by the publishers specifically for the purpose of writing a review. These gifts and referral fees do not affect my opinions; I often give bad reviews anyway.

We use Google third-party advertising companies to serve ads when you visit our website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you. If you would like more information about this practice and to know your choices about not having this information used by these companies, click here.