Re: [SAGE] technical help with routing on Solaris 10

[Bill LeFebvre <bill@lefebvre.org>]

Adam Levin wrote:
> Well, we're getting closer.  It appears the *reason* I'm not seeing the 
> tcpdump packets is that I'm looking for source/destination of 10.66.0.3, 
> and that filter isn't working.

Of course not.  The IP packets aren't addressed to it.  It would be 
useful, however, to also look at the ethernet addresses to ensure that 
the frames are addressed to the correct MAC address.

   The snoop above shows:
> 
> Using device /dev/bge0 (promiscuous mode)
> ________________________________
> im-b00-00.mgt.prd.sec.audible.com -> w2.rc.vip.scd.yahoo.com ETHER 
> Type=0800 (IP), size = 78 bytes
> im-b00-00.mgt.prd.sec.audible.com -> w2.rc.vip.scd.yahoo.com IP  
> D=66.94.234.13 S=10.66.3.31 LEN=64, ID=65425, TOS=0x0, TTL=64

Where did the source address 10.66.3.31 come from?  That's not one of 
the addresses on any of your interfaces.  Why are the packets leaving 
your host using that address as a source address?


-- 
		Bill LeFebvre
		Mooney 4074H
		bill@lefebvre.org