* route problem
@ 2012-01-18 9:17 Prashant Batra (prbatra)
2012-01-18 9:27 ` Eric Dumazet
0 siblings, 1 reply; 7+ messages in thread
From: Prashant Batra (prbatra) @ 2012-01-18 9:17 UTC (permalink / raw)
To: netdev
Hi,
I have added a route for an external ip via a gateway which is available
on the same machine.
I want to capture the packets going to this external IP using PF_PACKET
socket.
#route
Destination Gateway Genmask Flags Metric Ref Use
Iface
192.168.101.0 * 255.255.255.0 U 0 0 0
eth1
172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
eth1
So, when a packet is sent to 172.16.60.*, kernel should send arp request
for this gw IP 192.168.101.10. As gw IP is locally reachable,
It should send its mac address in arp-response and kernel should send
the packet via that interface.
But what I am seeing is that instead of asking the gateway IP, kernel
sends a arp request for destingation ip(172.16.60.*)
#tcpdump -I eth1
04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
Is my understanding correct?
Regards,
Prashant
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: route problem
2012-01-18 9:17 route problem Prashant Batra (prbatra)
@ 2012-01-18 9:27 ` Eric Dumazet
2012-01-18 10:08 ` Prashant Batra (prbatra)
0 siblings, 1 reply; 7+ messages in thread
From: Eric Dumazet @ 2012-01-18 9:27 UTC (permalink / raw)
To: Prashant Batra (prbatra); +Cc: netdev
Le mercredi 18 janvier 2012 à 14:47 +0530, Prashant Batra (prbatra) a
écrit :
> Hi,
>
> I have added a route for an external ip via a gateway which is available
> on the same machine.
> I want to capture the packets going to this external IP using PF_PACKET
> socket.
>
> #route
> Destination Gateway Genmask Flags Metric Ref Use
> Iface
> 192.168.101.0 * 255.255.255.0 U 0 0 0
> eth1
> 172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
> eth1
>
> So, when a packet is sent to 172.16.60.*, kernel should send arp request
> for this gw IP 192.168.101.10. As gw IP is locally reachable,
> It should send its mac address in arp-response and kernel should send
> the packet via that interface.
>
> But what I am seeing is that instead of asking the gateway IP, kernel
> sends a arp request for destingation ip(172.16.60.*)
>
> #tcpdump -I eth1
> 04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
>
Redirect problem ?
Please post
uname -a
ip ro list cache
^ permalink raw reply [flat|nested] 7+ messages in thread
* RE: route problem
2012-01-18 9:27 ` Eric Dumazet
@ 2012-01-18 10:08 ` Prashant Batra (prbatra)
2012-01-18 10:15 ` Eric Dumazet
0 siblings, 1 reply; 7+ messages in thread
From: Prashant Batra (prbatra) @ 2012-01-18 10:08 UTC (permalink / raw)
To: Eric Dumazet; +Cc: netdev
[-- Attachment #1: Type: text/plain, Size: 1764 bytes --]
2.6.18 kernel.
-----Original Message-----
From: Eric Dumazet [mailto:eric.dumazet@gmail.com]
Sent: Wednesday, January 18, 2012 2:58 PM
To: Prashant Batra (prbatra)
Cc: netdev@vger.kernel.org
Subject: Re: route problem
Le mercredi 18 janvier 2012 à 14:47 +0530, Prashant Batra (prbatra) a
écrit :
> Hi,
>
> I have added a route for an external ip via a gateway which is available
> on the same machine.
> I want to capture the packets going to this external IP using PF_PACKET
> socket.
>
> #route
> Destination Gateway Genmask Flags Metric Ref Use
> Iface
> 192.168.101.0 * 255.255.255.0 U 0 0 0
> eth1
> 172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
> eth1
>
> So, when a packet is sent to 172.16.60.*, kernel should send arp request
> for this gw IP 192.168.101.10. As gw IP is locally reachable,
> It should send its mac address in arp-response and kernel should send
> the packet via that interface.
>
> But what I am seeing is that instead of asking the gateway IP, kernel
> sends a arp request for destingation ip(172.16.60.*)
>
> #tcpdump -I eth1
> 04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
> 04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
>
Redirect problem ?
Please post
uname -a
ip ro list cache
[-- Attachment #2: route.txt --]
[-- Type: text/plain, Size: 44052 bytes --]
broadcast 10.6.9.255 from 10.6.9.59 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.9.152 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.150 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.190 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.68 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.230 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.156 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.178 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.4.5.253 dev lo src 10.6.9.246
cache <local> iif eth0
local 10.6.9.246 from 10.6.9.111 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
10.6.10.255 from 10.6.10.63 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.157 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.142.14.109 dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.11 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.245 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.202 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.240 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.72 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.178 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.43 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 192.168.101.10 from 192.168.101.101 dev lo src 192.168.101.10
cache <local,src-direct> iif eth1
10.6.8.255 from 10.6.8.5 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.234 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.78 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.5 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.199 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.30 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.235 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.163 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.78 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.23 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.177 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.86 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.181 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.95 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.168 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.121 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.9.115 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.4.1.50 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.107 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.200 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.187 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.84 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.9 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.212 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.78 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.162 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.72 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.215 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.225 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.227 dev lo src 10.6.9.246
cache <local,brd> iif eth0
10.6.2.255 from 10.6.2.74 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.154 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.10.255 from 10.6.10.181 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.145 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.171 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.13 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.56 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.141 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.163 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.179 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.182 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.31 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.176 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.180 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.130 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.70 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.9.116 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.8.255 from 10.6.8.142 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.88 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.52 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.10 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.2.0.3 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.99 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.66 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.248 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.181 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.157 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.196 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.146 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.17 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.43 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.6 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.148 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.158 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.4 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.29 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.145 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.4.5.253 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 dev eth0 src 10.6.9.246
cache <local,brd> mtu 1500 advmss 1460 hoplimit 64
10.6.8.255 from 10.6.8.151 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.214 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.21 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.73 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.75 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.188 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.200 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.25 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.79 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 255.255.255.255 from 10.6.11.234 dev lo src 10.6.9.246
cache <local,brd> iif eth0
broadcast 255.255.255.255 from 10.6.11.205 dev lo src 10.6.9.246
cache <local,brd> iif eth0
broadcast 10.6.9.255 from 10.6.9.63 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.240 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.229 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.49 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.89 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.161 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.111 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.10.255 from 10.6.10.88 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.150 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.14 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.170 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.164 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.1 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.142 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.131 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.6.9.121 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.93 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.177 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.76 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.108 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.99 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.200 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.9.68 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.8.255 from 10.6.8.152 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.11 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.172 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.216 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.144 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.137 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.71 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 192.168.101.20 from 192.168.101.101 dev lo src 192.168.101.20
cache <local,src-direct> iif eth1
10.6.8.255 from 10.6.8.92 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.54 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.81 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.225 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.172 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.197 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.173 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.161 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.1.245 dev lo src 10.6.9.246
cache <local> iif eth0
broadcast 10.6.9.255 from 10.6.9.212 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.36 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.157 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.200 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.53 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.221 dev lo src 10.6.9.246
cache <local,brd> iif eth0
broadcast 10.6.9.255 from 10.6.9.53 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.174 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.238 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.187 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 255.255.255.255 from 10.6.11.229 dev lo src 10.6.9.246
cache <local,brd> iif eth0
192.168.101.101 tos 0x01 dev eth1 src 192.168.101.10
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.92 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.100 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.34 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.176 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.213 dev lo src 10.6.9.246
cache <local,brd> iif eth0
10.6.9.153 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.72 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.23 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.136 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.191 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.1 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.240 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.204 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.9 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.218 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.46 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.21 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.9.129 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.94 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.174 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.156 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.149 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.24 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.64 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.214 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.217 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.142.14.109 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
10.6.10.255 from 10.6.10.27 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.1.32 tos lowdelay dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.183 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.84 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.186 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.198 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.242 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.151 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.141 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.159 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.192 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.179 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.254 dev lo src 10.6.9.246
cache <local,brd> iif eth0
10.6.8.255 from 10.6.8.198 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.48 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.9.107 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
10.6.10.255 from 10.6.10.2 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.20 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.6.9.115 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
10.6.2.255 from 10.6.2.236 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.10 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.79 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.38 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.135 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.48 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.6 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.31 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.57 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.171 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.226 dev lo src 10.6.9.246
cache <local,brd> iif eth0
broadcast 10.6.9.255 from 10.6.9.95 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.8 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.171 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.254 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.26 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.60 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.51 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.185 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.83 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.61 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.69 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.40 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.199 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.57 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.237 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.97 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.179 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.49 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.37 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.9.254 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
10.6.8.255 from 10.6.8.18 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.90 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.30 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.39 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.103 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.96 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.16 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.2.0.3 tos lowdelay dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.150 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.47 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.19 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.2 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.38 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.93 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 255.255.255.255 from 10.6.11.230 dev lo src 10.6.9.246
cache <local,brd> iif eth0
10.6.10.255 from 10.6.10.8 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.160 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.143 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.179 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.59 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.205 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.27 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.182 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.161 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.140 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.61 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.46 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.240 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.159 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.74 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.170 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.43 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.85 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.83 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.134 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.107 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.73 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.33 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.175 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.189 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.33 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.3 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.36 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.75 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.9 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.169 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.185 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.51 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.41 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.20 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.1.2 dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.15 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.143 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.213 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.180 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.185 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.173 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.31 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.4.1.50 tos lowdelay dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.45 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.10 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.245 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.6.9.129 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.55 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.241 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.156 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.162 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.138 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.7 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.40 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.183 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.91 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.245 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.42 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.144 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.94 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.83 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.58 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.55 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.27 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.141 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.80 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.67 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.47 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.149 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.1.2 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.68 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.32 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.11.255 from 10.6.11.228 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.155 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.7 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.42 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.39 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.2.10.247 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
10.6.2.255 from 10.6.2.166 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.143 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.9.64 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.8.255 from 10.6.8.47 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.246 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.186 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.184 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.132 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.44 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.9.112 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
10.6.10.255 from 10.6.10.72 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.139 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.6.9.112 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.25 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.182 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.175 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.98 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.9.227 tos 0x01 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
broadcast 10.6.9.255 from 10.6.9.220 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.69 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.2.255 from 10.6.2.152 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.22 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.155 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.189 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.178 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.30 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.197 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.1.32 from 10.6.9.246 tos lowdelay via 10.6.9.254 dev eth0
cache mtu 1500 advmss 1460 hoplimit 64
10.6.11.255 from 10.6.11.45 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
local 10.6.9.246 from 10.6.9.116 dev lo src 10.6.9.246
cache <local,src-direct> iif eth0
10.6.10.255 from 10.6.10.184 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.187 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.1.2 from 10.6.9.246 via 10.6.9.254 dev eth0
cache mtu 1500 rtt 33ms rttvar 45ms cwnd 3 advmss 1460 hoplimit 64
broadcast 255.255.255.255 dev lo src 10.6.9.246
cache <local,brd> iif eth0
broadcast 10.6.9.255 from 10.6.9.56 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.183 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.181 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.73 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.171 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.186 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
local 10.6.9.246 from 10.2.10.247 tos lowdelay dev lo src 10.6.9.246
cache <local> iif eth0
10.6.8.255 from 10.6.8.10 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.168 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.142 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
broadcast 10.6.9.255 from 10.6.9.235 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.10.255 from 10.6.10.23 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.153 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.195 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.2.255 from 10.6.2.237 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.12 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.176 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.12 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.175 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.255.255.255 from 10.6.11.243 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.1.245 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64
5.5.5.255 from 5.5.5.5 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.211 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.180 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.184 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.35 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.11.255 from 10.6.11.27 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.8.255 from 10.6.8.87 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
broadcast 10.6.9.255 from 10.6.9.173 dev lo src 10.6.9.246
cache <local,brd,src-direct> iif eth0
10.6.8.255 from 10.6.8.196 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
10.6.10.255 from 10.6.10.15 via 10.6.9.254 dev eth0 src 10.6.9.246
cache mtu 1500 advmss 1460 hoplimit 64 iif eth0
^ permalink raw reply [flat|nested] 7+ messages in thread
* RE: route problem
2012-01-18 10:08 ` Prashant Batra (prbatra)
@ 2012-01-18 10:15 ` Eric Dumazet
2012-01-19 1:29 ` Bill Fink
0 siblings, 1 reply; 7+ messages in thread
From: Eric Dumazet @ 2012-01-18 10:15 UTC (permalink / raw)
To: Prashant Batra (prbatra); +Cc: netdev
Le mercredi 18 janvier 2012 à 15:38 +0530, Prashant Batra (prbatra) a
écrit :
> 2.6.18 kernel.
>
Please dont top post on netdev mailing list
> -----Original Message-----
> From: Eric Dumazet [mailto:eric.dumazet@gmail.com]
> Sent: Wednesday, January 18, 2012 2:58 PM
> To: Prashant Batra (prbatra)
> Cc: netdev@vger.kernel.org
> Subject: Re: route problem
>
> Le mercredi 18 janvier 2012 à 14:47 +0530, Prashant Batra (prbatra) a
> écrit :
> > Hi,
> >
> > I have added a route for an external ip via a gateway which is available
> > on the same machine.
> > I want to capture the packets going to this external IP using PF_PACKET
> > socket.
> >
> > #route
> > Destination Gateway Genmask Flags Metric Ref Use
> > Iface
> > 192.168.101.0 * 255.255.255.0 U 0 0 0
> > eth1
> > 172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
> > eth1
> >
> > So, when a packet is sent to 172.16.60.*, kernel should send arp request
> > for this gw IP 192.168.101.10. As gw IP is locally reachable,
> > It should send its mac address in arp-response and kernel should send
> > the packet via that interface.
> >
> > But what I am seeing is that instead of asking the gateway IP, kernel
> > sends a arp request for destingation ip(172.16.60.*)
> >
> > #tcpdump -I eth1
> > 04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
> > 04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
> >
This comes from another machine, since your eth1 addr is 192.168.101.10
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: route problem
2012-01-18 10:15 ` Eric Dumazet
@ 2012-01-19 1:29 ` Bill Fink
2012-01-19 5:53 ` Prashant Batra (prbatra)
2012-01-19 6:50 ` Eric Dumazet
0 siblings, 2 replies; 7+ messages in thread
From: Bill Fink @ 2012-01-19 1:29 UTC (permalink / raw)
To: Eric Dumazet; +Cc: Prashant Batra (prbatra), netdev
On Wed, 18 Jan 2012, Eric Dumazet wrote:
> Le mercredi 18 janvier 2012 à 15:38 +0530, Prashant Batra (prbatra) a
> écrit :
> > 2.6.18 kernel.
> >
>
> Please dont top post on netdev mailing list
>
> > -----Original Message-----
> > From: Eric Dumazet [mailto:eric.dumazet@gmail.com]
> > Sent: Wednesday, January 18, 2012 2:58 PM
> > To: Prashant Batra (prbatra)
> > Cc: netdev@vger.kernel.org
> > Subject: Re: route problem
> >
> > Le mercredi 18 janvier 2012 à 14:47 +0530, Prashant Batra (prbatra) a
> > écrit :
> > > Hi,
> > >
> > > I have added a route for an external ip via a gateway which is available
> > > on the same machine.
> > > I want to capture the packets going to this external IP using PF_PACKET
> > > socket.
> > >
> > > #route
> > > Destination Gateway Genmask Flags Metric Ref Use
> > > Iface
> > > 192.168.101.0 * 255.255.255.0 U 0 0 0
> > > eth1
> > > 172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
> > > eth1
> > >
> > > So, when a packet is sent to 172.16.60.*, kernel should send arp request
> > > for this gw IP 192.168.101.10. As gw IP is locally reachable,
> > > It should send its mac address in arp-response and kernel should send
> > > the packet via that interface.
> > >
> > > But what I am seeing is that instead of asking the gateway IP, kernel
> > > sends a arp request for destingation ip(172.16.60.*)
> > >
> > > #tcpdump -I eth1
> > > 04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
> > >
>
> This comes from another machine, since your eth1 addr is 192.168.101.10
Actually, if I'm interpreting the "ip route list cache" output
correctly, it appears it has local IP addresses of both 192.168.101.10
and 192.168.101.20.
> local 192.168.101.10 from 192.168.101.101 dev lo src 192.168.101.10
> cache <local,src-direct> iif eth1
> local 192.168.101.20 from 192.168.101.101 dev lo src 192.168.101.20
> cache <local,src-direct> iif eth1
And since his gateway is 192.168.101.10, an apparently local
IP address, that would probably explain the direct ARPS for
172.16.60.*.
-Bill
^ permalink raw reply [flat|nested] 7+ messages in thread
* RE: route problem
2012-01-19 1:29 ` Bill Fink
@ 2012-01-19 5:53 ` Prashant Batra (prbatra)
2012-01-19 6:50 ` Eric Dumazet
1 sibling, 0 replies; 7+ messages in thread
From: Prashant Batra (prbatra) @ 2012-01-19 5:53 UTC (permalink / raw)
To: Bill Fink, Eric Dumazet; +Cc: netdev
-----Original Message-----
From: Bill Fink [mailto:billfink@mindspring.com]
Sent: Thursday, January 19, 2012 6:59 AM
To: Eric Dumazet
Cc: Prashant Batra (prbatra); netdev@vger.kernel.org
Subject: Re: route problem
On Wed, 18 Jan 2012, Eric Dumazet wrote:
> Le mercredi 18 janvier 2012 à 15:38 +0530, Prashant Batra (prbatra) a
> écrit :
> > 2.6.18 kernel.
> >
>
> Please dont top post on netdev mailing list
>
> > -----Original Message-----
> > From: Eric Dumazet [mailto:eric.dumazet@gmail.com]
> > Sent: Wednesday, January 18, 2012 2:58 PM
> > To: Prashant Batra (prbatra)
> > Cc: netdev@vger.kernel.org
> > Subject: Re: route problem
> >
> > Le mercredi 18 janvier 2012 à 14:47 +0530, Prashant Batra (prbatra) a
> > écrit :
> > > Hi,
> > >
> > > I have added a route for an external ip via a gateway which is available
> > > on the same machine.
> > > I want to capture the packets going to this external IP using PF_PACKET
> > > socket.
> > >
> > > #route
> > > Destination Gateway Genmask Flags Metric Ref Use
> > > Iface
> > > 192.168.101.0 * 255.255.255.0 U 0 0 0
> > > eth1
> > > 172.16.60.0 192.168.101.10 255.255.255.0 UG 0 0 0
> > > eth1
> > >
> > > So, when a packet is sent to 172.16.60.*, kernel should send arp request
> > > for this gw IP 192.168.101.10. As gw IP is locally reachable,
> > > It should send its mac address in arp-response and kernel should send
> > > the packet via that interface.
> > >
> > > But what I am seeing is that instead of asking the gateway IP, kernel
> > > sends a arp request for destingation ip(172.16.60.*)
> > >
> > > #tcpdump -I eth1
> > > 04:12:45.334966 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:46.334839 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:48.334584 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:49.334457 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:50.335329 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:52.335075 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:53.334947 arp who-has 172.16.60.2 tell 192.168.101.20
> > > 04:12:54.334821 arp who-has 172.16.60.2 tell 192.168.101.20
> > >
>
> This comes from another machine, since your eth1 addr is 192.168.101.10
Actually, if I'm interpreting the "ip route list cache" output
correctly, it appears it has local IP addresses of both 192.168.101.10
and 192.168.101.20.
[Prashant] Yes both IPs are present on the same machine but on different interfaces.
> local 192.168.101.10 from 192.168.101.101 dev lo src 192.168.101.10
> cache <local,src-direct> iif eth1
> local 192.168.101.20 from 192.168.101.101 dev lo src 192.168.101.20
> cache <local,src-direct> iif eth1
And since his gateway is 192.168.101.10, an apparently local
IP address, that would probably explain the direct ARPS for
172.16.60.*.
[Prashant] So is this the correct behavior? What my original intention was to capture the packets from the
interface acting as gateway. So with this behavior I will not be able to capture the packets as 172.16.60.* are not
present on the local machine, and it will not get any ARP response.
Consider the gateway on a different machine, in which case ARP request will go for gateway IP, and local machine will
get the ARP response and send the packets to gateway.
Regards,
Prashant
-Bill
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: route problem
2012-01-19 1:29 ` Bill Fink
2012-01-19 5:53 ` Prashant Batra (prbatra)
@ 2012-01-19 6:50 ` Eric Dumazet
1 sibling, 0 replies; 7+ messages in thread
From: Eric Dumazet @ 2012-01-19 6:50 UTC (permalink / raw)
To: Bill Fink; +Cc: Prashant Batra (prbatra), netdev
Le mercredi 18 janvier 2012 à 20:29 -0500, Bill Fink a écrit :
> On Wed, 18 Jan 2012, Eric Dumazet wrote:
> Actually, if I'm interpreting the "ip route list cache" output
> correctly, it appears it has local IP addresses of both 192.168.101.10
> and 192.168.101.20.
>
> > local 192.168.101.10 from 192.168.101.101 dev lo src 192.168.101.10
> > cache <local,src-direct> iif eth1
>
> > local 192.168.101.20 from 192.168.101.101 dev lo src 192.168.101.20
> > cache <local,src-direct> iif eth1
>
> And since his gateway is 192.168.101.10, an apparently local
> IP address, that would probably explain the direct ARPS for
> 172.16.60.*.
>
Ah ok, thanks.
Pity that such a convoluted setup must be guessed instead of clearly
explained in the initial mail.
Prashant, this is netdev mailing list, with more than a thousand
subscribers, you should send mails with your detailed setup, this will
save time for everyone.
If not, people will flag you as "yet another lazy student trying to
understand how things work"
> [Prashant] So is this the correct behavior? What my original intention
> was to capture the packets from the
> interface acting as gateway. So with this behavior I will not be able
> to capture the packets as 172.16.60.* are not
> present on the local machine, and it will not get any ARP response.
> Consider the gateway on a different machine, in which case ARP request
> will go for gateway IP, and local machine will
> get the ARP response and send the packets to gateway.
>
With the setup you gave, you said : 172.16.60.0/24 addresses are
directly reachable on eth1 device, with source address 192.168.101.20
Why should the kernel send an ARP request for 192.168.101.20, since its
one of its own IP address ?
For localy generated packets, why this machine would act as a 'gateway'
at all ? A gateway should forward packets, and first step would be to
_receive_ a packet, not sending one !
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2012-01-19 6:51 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-01-18 9:17 route problem Prashant Batra (prbatra)
2012-01-18 9:27 ` Eric Dumazet
2012-01-18 10:08 ` Prashant Batra (prbatra)
2012-01-18 10:15 ` Eric Dumazet
2012-01-19 1:29 ` Bill Fink
2012-01-19 5:53 ` Prashant Batra (prbatra)
2012-01-19 6:50 ` Eric Dumazet
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox