FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian User

 
 
LinkBack Thread Tools
 
Old 11-10-2010, 08:29 PM
 
Default Odd network issue

I'm have some issues while connected to the network on campus only. From
the moment I get connected to the wifi, bwm-ng is reporting I'm receiving
nearly 50KB/s of traffic. I don't have a browsers open etc. Looking at
tcpdump, I see a lot of this.

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan0, link-type EN10MB (Ethernet), capture size 96 bytes

16:14:19.205411 IP6 fe80::cddc:9baa:c287:41bc > ff02::16: HBH ICMP6,
multicast listener report v2, 1 group record(s), length 28
16:14:19.205416 00:22:41:98:8f:21 (oui Unknown) > 01:40:96:ff:ff:00 (oui
Unknown), ethertype Unknown (0x872d), length 60:
0x0000: 0022 0202 0140 96ff ff00 0022 4198 8f21 ."...@....."A..!
0x0010: 0022 4198 8f21 000a b8cb 8b10 0000 0000 ."A..!..........
0x0020: 0000 0000 0000 0000 0000 63ae 7db8 ..........c.}.
16:14:19.205536 arp who-has r30-133-73-207.wccnet.org tell
r251-130-73-207.wccnet.org
16:14:19.205621 IP6 fe80::cddc:9baa:c287:41bc.59001 > ff02::1:3.hostmon:
UDP, length 32
16:14:19.205627 IP r74-132-73-207.wccnet.org.62342 > 224.0.0.252.hostmon:
UDP, length 32
16:14:19.246879 IP r214-130-73-207.wccnet.org.mdns > 224.0.0.251.mdns: 0
PTR (QM)? 168.139.73.207.in-addr.arpa. (45)
16:14:19.413743 IP6 fe80::444:c0df:351c:69f.54177 > ff02::1:3.hostmon:
UDP, length 26
16:14:19.413858 IP r240-130-73-207.wccnet.org.54985 > 224.0.0.252.hostmon:
UDP, length 26
16:14:19.413945 IP6 fe80::cddc:9baa:c287:41bc > ff02::16: HBH ICMP6,
multicast listener report v2, 4 group record(s), length 88
16:14:19.414036 IP6 fe80::504f:2731:3f62:1637.546 > ff02::1:2.547: dhcp6
solicit
16:14:19.414042 arp who-has 207.73.139.96 tell 207.73.139.1

C1252 packets captured
8149 packets received by filter
6624 packets dropped by kernel

With all this activity I can barely ssh to a machine, let alone surf the
web. I look around at classmates who are running something other than *nix
and they are all surfing away just fine.

I don't know a whole lot about networking, which leaves me with not much
of an idea on where to start on all of this. Any help would be really
appreaciated.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20101110212917.GA24956@shellium.org">http://lists.debian.org/20101110212917.GA24956@shellium.org
 
Old 11-11-2010, 09:06 AM
Camaleón
 
Default Odd network issue

On Wed, 10 Nov 2010 16:29:17 -0500, gun_smoke wrote:

> I'm have some issues while connected to the network on campus only. From
> the moment I get connected to the wifi, bwm-ng is reporting I'm
> receiving nearly 50KB/s of traffic. I don't have a browsers open etc.
> Looking at tcpdump, I see a lot of this.

(...)

Looks to me like all that is internal traffic coming from your AP,
nothing strange.

> With all this activity I can barely ssh to a machine, let alone surf the
> web. I look around at classmates who are running something other than
> *nix and they are all surfing away just fine.
>
> I don't know a whole lot about networking, which leaves me with not much
> of an idea on where to start on all of this. Any help would be really
> appreaciated.

Mmm, your problem is that you cannot browse the web? Then perform the
usual steps:

ping -c 3 google.com
dig google.com
traceroute google.com

:-)

Greetings,

--
Camaleón


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: pan.2010.11.11.10.06.14@gmail.com">http://lists.debian.org/pan.2010.11.11.10.06.14@gmail.com
 
Old 11-11-2010, 03:54 PM
Wayne Topa
 
Default Odd network issue

On 11/10/2010 04:29 PM, gun_smoke@shellium.org wrote:

I'm have some issues while connected to the network on campus only. From
the moment I get connected to the wifi, bwm-ng is reporting I'm receiving
nearly 50KB/s of traffic. I don't have a browsers open etc. Looking at
tcpdump, I see a lot of this.

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on wlan0, link-type EN10MB (Ethernet), capture size 96 bytes

16:14:19.205411 IP6 fe80::cddc:9baa:c287:41bc> ff02::16: HBH ICMP6,
multicast listener report v2, 1 group record(s), length 28
16:14:19.205416 00:22:41:98:8f:21 (oui Unknown)> 01:40:96:ff:ff:00 (oui


i<SNIP>


C1252 packets captured
8149 packets received by filter
6624 packets dropped by kernel

With all this activity I can barely ssh to a machine, let alone surf the
web. I look around at classmates who are running something other than *nix
and they are all surfing away just fine.

I don't know a whole lot about networking, which leaves me with not much
of an idea on where to start on all of this. Any help would be really
appreaciated.



What, if any, firewall do you have installed?

I had the same problem here when I (finally) got a wireless setup. I
tried a bunch of firewalls and and settled on arno-iptables-firewall

and privoxy.

Now I can surf the web and don't have many sites eating not only my
bandwidth but also eating up my 5 Gig monthly allocation.


HTH

Wayne



--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Archive: 4CDC1FCC.2020403@gmail.com">http://lists.debian.org/4CDC1FCC.2020403@gmail.com
 
Old 11-11-2010, 06:36 PM
 
Default Odd network issue

On Thu, Nov 11, 2010 at 11:54:36AM -0500, Wayne Topa wrote:
>
> What, if any, firewall do you have installed?
>
> I had the same problem here when I (finally) got a wireless setup.
> I tried a bunch of firewalls and and settled on
> arno-iptables-firewall
> and privoxy.
>
> Now I can surf the web and don't have many sites eating not only my
> bandwidth but also eating up my 5 Gig monthly allocation.
>
> HTH
>
> Wayne

I have shorewall installed with the following...

######################### I N T E R F A C E S
##################################
#ZONE INTERFACE BROADCAST OPTIONS
net wlan0 detect dhcp,tcpflags,logmartians,nosmurfs
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

########################### P O L I C Y
########################################
#SOURCE DEST POLICY LOG LEVEL
LIMIT:BURST
$FW net ACCEPT
net $FW DROP info 1/sec:2
net all DROP info
# The FOLLOWING POLICY MUST BE LAST
all all REJECT info
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

############################ R U L E S
#########################################
#ACTION SOURCE DEST PROTO DEST SOURCE
ORIGINAL RATE USER/ MARK
# PORT PORT(S)
# DEST
# LIMIT
# GROUP
# Drop Ping from the "bad" net zone.. and prevent your log from being
# flooded..
Ping/DROP net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone
ACCEPT $FW net icmp
# MY ENTRIES
BitTorrent/ACCEPT net $FW
SSH/ACCEPT net $FW tcp 12211
Ping/ACCEPT $FW net
REJECT net:~1e:90:32:82:b2:08 $FW
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

############################ Z O N E S
#########################################
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
net ipv4
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE


I won't be back on campus until Monday if anyone has a need to see some
additional log etc. I hope I can figure something out..


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20101111193606.GA27040@shellium.org">http://lists.debian.org/20101111193606.GA27040@shellium.org
 
Old 11-11-2010, 06:48 PM
 
Default Odd network issue

On Thu, Nov 11, 2010 at 10:06:14AM +0000, Camaleón wrote:
>
> Mmm, your problem is that you cannot browse the web? Then perform the
> usual steps:
>
> ping -c 3 google.com
> dig google.com
> traceroute google.com

I can ping google. No packet loss, but the times are in the 1000-2000ms
times.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20101111194818.GA3937@shellium.org">http://lists.debian.org/20101111194818.GA3937@shellium.org
 

Thread Tools




All times are GMT. The time now is 09:43 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org