Low level IP question. 2.1.88 bug?

bwoodard@cisco.com
Mon, 09 Mar 1998 19:14:13 -0800


I am working on a network application and so I thought a tcpdump would
be a good way to help debug it. While running it I saw something
strange

18:49:30.504941 arp who-has 171.70.253.25 tell 171.70.253.28
18:49:30.504941 arp reply 171.70.253.25 is-at 0:0:c:32:c8:7e
18:53:25.994941 171.70.253.28.1043 > 171.68.10.70.53: 24597+ (38)
18:53:26.054941 171.68.10.70.53 > 171.70.253.28.1043: 24597* 1/6/6 (287) (DF)
18:53:30.994941 arp who-has 171.70.253.25 tell 171.70.253.28
18:53:30.994941 arp reply 171.70.253.25 is-at 0:0:c:32:c8:7e
18:54:52.424941 171.70.253.28.1043 > 171.68.10.70.53: 16157+ (38)
18:54:52.464941 171.68.10.70.53 > 171.70.253.28.1043: 16157* 1/6/6 (287) (DF)
18:54:57.424941 arp who-has 171.70.253.25 tell 171.70.253.28
18:54:57.424941 arp reply 171.70.253.25 is-at 0:0:c:32:c8:7e
18:55:38.574941 171.70.253.28.1043 > 171.68.205.26.161: GetRequest(11)[|snmp]
18:55:38.624941 171.68.205.26.161 > 171.70.253.28.1043: GetResponse(11) noSuchName[errorIndex==0][|snmp]
18:57:05.104941 171.70.253.28.1043 > 171.68.205.26.161: GetRequest(11)[|snmp]
18:57:05.134941 171.68.205.26.161 > 171.70.253.28.1043: GetResponse(11) noSuchName[errorIndex==0][|snmp]
18:57:10.104941 arp who-has 171.70.253.25 tell 171.70.253.28
18:57:10.104941 arp reply 171.70.253.25 is-at 0:0:c:32:c8:7e

it seems like my computer is having to ask who 171.70.253.25 is all
the time. 25 is my router. I thought that is what the arp cache is for.
In fact if you look in my arp cache you see:

[bwoodard@trill easysnmp]$ /sbin/arp -a
? (171.70.253.25) at 00:00:0C:32:C8:7E [ether] on eth0
localhost (127.0.0.1) at 00:00:00:00:00:00 [ether] on lo

Why does it have arp the router all the time and why aren't all the
rest of the hosts on my net in the arp cache. My seldom used sparc
station seems to have the arp table for my lan figured out. The only
one that it doesn't have in its arp cache is my printer which it never
talks to directly:

bash-2.01$ /usr/sbin/arp -a
Net to Media Table
Device IP Address Mask Flags Phys Addr
------ -------------------- --------------- ----- ---------------
le0 trill.cisco.com 255.255.255.255 00:80:c7:94:7a:91
le0 171.70.253.25 255.255.255.255 00:00:0c:32:c8:7e
le0 bwoodard-isdn1.cisco.com 255.255.255.255 SP 08:00:20:23:15:d5
le0 bwoodard-isdn2.cisco.com 255.255.255.255 00:00:c0:fe:d4:d3
le0 BASE-ADDRESS.MCAST.NET 240.0.0.0 SM 01:00:5e:00:00:00

My router (cisco) is really on the ball and has everything:

bwoodard-isdn>show arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 171.70.253.25 - 0000.0c32.c87e ARPA Ethernet0
Internet 171.70.253.26 17 0800.2023.15d5 ARPA Ethernet0
Internet 171.70.253.27 2 0000.c0fe.d4d3 ARPA Ethernet0
Internet 171.70.253.28 3 0080.c794.7a91 ARPA Ethernet0
Internet 171.70.253.29 96 0800.095e.b301 ARPA Ethernet0

The thing is that just seconds after I disconnect from the telnet to my sparc and router that I used to generate this email I look at my arp cache again and I see that it hasn't changed.

Connection closed by foreign host.
[bwoodard@trill easysnmp]$ /sbin/arp -a
bwoodard-isdn1.cisco.com (171.70.253.26) at 08:00:20:23:15:D5 [ether] on eth0
? (171.70.253.25) at 00:00:0C:32:C8:7E [ether] on eth0

What is up?

-ben

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu