Protocols / Routing :: How To Route Promiscuous Packets
Mar 21, 2011
I am trying to finish a project and i now have a very un-natural networking question, but i figure that this is the correct place to ask it.
Tools:
Routing Device = Router.
Test App = Creates and Sends Packets through my machine's NIC via NDIS Driver.
WAN = Internet.
VPN = Connected over WAN.
I am trying to route/forward/nat promiscuous packets "TO" the Internet to finish my project. The packets are not addressed to my routing device, but it must take them and forward them on to a VPN connected over the WAN. The packets are actually created by my NDIS test app. This means that the packets will be generated on my local LAN, but will not contain the MAC or IP of the routing device. So they will only enter my routing device while it is running in a promiscuous mode.. how would you try to route promiscuous packets out to the internet?
View 6 Replies
ADVERTISEMENT
Sep 13, 2012
I have an Acer Aspire one that connected perfectly to the internet until I did a reformat. Now it only works if through a wired connection or if the internet does not have a password protection. I have tried on 2 different locations with secure wireless and both have the same result. Packets are sent but not received. All other devices in either location are able to connect to internet through wired or wireless connections.IP address is at 192.xxx and DHCP is enabled, TCP/IP is set to obtain automatically and I deleted and downloaded the newest drivers from the Acer website twice. I also did a winsock reset and tried to clear the arp cache? One of the issues I am getting when I run the diagnostic is "warn default gateway address could not be resolved via arp". I'm not sure how to resolve that.
View 1 Replies
View Related
Apr 25, 2013
We have a typicaly environment, access, distribution, core, all switches are 6500s.I have a lab environment where machines should not talk to each other, so I think private vlans would be good for this. The problem is that the access connects to the distribution with a 802.1q trunk, while the distribution connects to the core with an 802.1q trunk. See the attached image for reference.
In this case, I would configure the primary vlan (888) on the two access switches, as well as the isolated (886) and the community (887), and set the associations.
vlan 886
name Isolated_PVLAN
private-vlan isloated
vlan 887
name Community_PVLAN
private-vlan community
vlan 888
private-vlan primary
private-vlan association 886,887
exit
The host ports would be set as such.
interface g3/40
switchport mode private-vlan host
switchport private-vlan host-association 888 886
My question is where to I put the promiscuous port? Is it on the uplink between the access and distribution? And If I configure it as I have below, what about the other VLANs that are needed at the access switch? Do they still pass through the trunk as normal, even with the private-vlan configuration? Or would every other VLAN need to be configured as a secondary private-vlan on the promiscuous port?
interface g5/1
switchport mode private-vlan promiscuous
switchport private-vlan mapping 888 886,887
Also, would VLAN access-lists be a better method for controlling this traffic?
View 2 Replies
View Related
Oct 21, 2012
How to configure ASA not to drop packets with ip option 7 (record route)? According to the docs, ip inspect ip option will drop all ip option packets except 0,1,and 20 (EOOL, NOP, or RTRALT):
"If an IP header contains additional options other than EOOL, NOP, or RTRALT, regardless of whether the ASA is configured to allow these options, the ASA will drop the packet. "
Also, policy-map type inspect ip-options treats only these 3.
View 1 Replies
View Related
Jul 19, 2012
Have win7 system, cisco WIRED 1720 router, ~1.5mb frame relay via C&WPanama, nortons antivirus installed. IP config dump is at the bottom, but in this event, I don't think my problem is local.An important work-related chat quit working today, and I have narrowed down the issue to not being able to connect to the provider website from my current location. (I can connect via US proxy, but cannot run the java applet via the proxy, it seems it is still trying to go from here to there).
The site I am trying to reach is host7.parachat.com, IP 64.13.158.24
I can load this page (just a landing page comment) as well as their main pages via us proxy, but time out trying to load directly. Fiddler returns a 502 error, socket connection failed.
have tested on 3 machines (all on same router), then on a laptop which hadn't been booted or updated in over a year (also on same router). Trying to find a free wireless network to test with the laptop, but that hasn't been found yet.
[code]....
View 3 Replies
View Related
Apr 21, 2012
I recently purchased a RV082 in hopes of increasing the thruput of my network with multiple users. I initally did have issues with the router locking up and stop functioning every so often, but it seems I have fixed that (so far as I can tell). The main problem I'm having now is the "Load-Balancing" functionality. Because of certain websites I would like to route all HTTP traffic through WAN 1. I've tried doing this by using (System Management > Bandwidth Management > Type: Priority) and making all HTTP traffic a high priority on WAN1 but HTTP traffic still goes even amongst both of them. I've even tried using the Firewall to block all HTTP traffic on WAN 2 and that failed be too. Even with my superior interface know-how, I'm getting no-where with this task.
Also, as less important ambition. I would like to separate a port forward on port 80 so that I may host two website via my two WANs. I've read somewhere that using the firewall instead of the Forwarding function would work, but I was unable to accomplish that task.
View 8 Replies
View Related
May 7, 2012
I ordered a IPS module to a small ASA to replace a Snort IDS Server.I want only to perform IDS and reporting (not inline) The design (simplified) is
The problem is that i read this morning that ASA cannot handle this type of scenario, it can only analyse the traffic that is passing through it. Is there a chance to make this work ?
View 1 Replies
View Related
Sep 23, 2012
How i can enable promiscuous mode on my Atheros AR9285 Wireless Network Adapter? I'm using windows 7 starter.driver version of my Atheros AR9285 Wireless Network Adapter:9.2.0.427.
View 4 Replies
View Related
Apr 27, 2012
Last night, I lost my NetFlix connection. It was no biggy, I just restarted the Cheers episode that I had been watching. This morning, I checked the DIR-655 log and the following is what I had found (date and times aren't accurate).
May 24 03:22:33 info [1076865.190000] device br0 left promiscuous mode
May 24 03:22:29 info [1076861.620000] device br0 entered promiscuous mode
May 24 03:20:20 info [1076732.020000] device br0 left promiscuous mode
May 24 03:20:16 info [1076728.140000] device br0 entered promiscuous mode
May 24 01:45:42 info [1071054.590000] device br0 left promiscuous mode
[code]....
Promiscuous Mode is usually the result of sniffing according to Wiki. Whatever is promiscuous mode. Also, I don't know what device br0 is. I do have my Brother wireless printer connected to the DIR-655 but it's device name is BRW0022581FB096. I was wireless at the time of connection problem, and the wired computer connected to the DIR-655 had been off.
View 6 Replies
View Related
Feb 15, 2011
I have a Wireless-G USB Compact USB Network Adapter (WUSB54GC V1.0). Running XP. How do I set Promiscuous mode for this adapter?
View 1 Replies
View Related
Aug 20, 2011
why the WAN protocols like Frame-relay, HDLC and PPP are called Layer2 protocols?What is the address scheme they use?
View 5 Replies
View Related
Apr 5, 2011
I have got a PC at work (Windows XP Pro SP3) that is on two networks with the IPs 10.20.30.167, subnet 255.255.255.0 (internet enabled) and 10.0.0.20, subnet 255.255.255.0 (no internet). On the 10.0.0.X network there is a gateway with the IP 10.0.0.200 allowing access to another network; 192.168.60.X, subnet 255.255.255.0 (no internet). I have added the route on my work PC to access the 192.168.60.X network via this gateway and I can access all PCs on all three networks from this PC.Now, I am using LogMeIn Hamachi so that I can access the networks at work from home. The PC at work is the 'gateway' PC on the Hamachi network. When installing Hamachi it created a new network connection and bridged this connection with my 10.20.30.167 network adapter to allow access to the 10.20.30.X network from an external PC when connected using the Hamachi VPN connection. I have manually configured my Hamachi connection on my PC at home to the IP 10.20.30.169, subnet 255.255.255.0, with the default gateway set to 10.20.30.167. I can ping all computers on the 10.20.30.X network from my PC at home.
I then added a route on my PC at home for 10.0.0.X to go via 10.20.30.167 (the 'gateway' on the Hamachi network). I also enabled IP forwarding on the 'gateway' PC (my PC at work). I can not ping any PC on the 10.0.0.X network from my PC at home apart from 10.0.0.20 (the other NIC in the Hamachi gateway PC) and 10.0.0.30 (another PC on the 10.20.30.X network that is also on the 10.0.0.X network).Now, with IP forwarding enabled on the Hamachi gateway PC I would assume after adding the route on my PC at home for 10.0.0.X traffic to go via 10.20.30.167 that I would be able to ping all PCs on the 10.0.0.X network...I also tried adding a route on my home PC to send all traffic for the 192.168.60.X network via 10.20.30.167 which has a route via 10.0.0.200 to the 192.168.60.X network, but this also did not work.I then tried adding the 10.0.0.20 network adapter into the network bridge that the Hamachi connection made, also keeping both IPs (10.20.30.167 and 10.0.0.20) on this network bridge by adding them into the 'IP Settings' in the 'Advanced TCI/IP Settings'. I also added the 10.0.0.200 gateway for good measure. I still cannot ping any PC on the 10.0.0.X or 192.168.60.X networks from my PC at home.
I have also added the route to the 10.20.30.X network on a PC on the 10.0.0.X network to go via 10.0.0.20 and tried pinging a PC on the 10.20.30.X network but this also has not worked. Also setting the default gateway on a PC on the 10.0.0.X network to 10.0.0.20 does not allow this...Surely bridging the networks 10.20.30.167 and 10.0.0.20 on my work PC would allow another PC on the 10.0.0.X network to access the 10.20.30.X network after adding the route or setting 10.0.0.20 as the default gateway?
View 2 Replies
View Related
Dec 26, 2012
We have a customer who uses about 20 x c2960's switches for access layer and 2 x c3560e for distribution layer. C2960's uses C2960-LANLITEK9-M , Version 12.2(58)SE1. Everything was working fine. Now we got information, that sometimes there are problems with connectivity. Customer tries to reach internet.
SW11#sh int fa0/18
FastEthernet0/18 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is e8ba.806a.4412 (bia e8ba.806a.4412)
[Code].....
View 7 Replies
View Related
Feb 21, 2012
I am seeing packets being ignored on GigabitEthernet0/0, but can't find any reason what the reason can be for that. So far calculated that about 3% of the traffic is being ignored. If it was caused by shortage of input buffers, I would expect to see increasing counters somewhere at no_buffer, but that is not the case. The average txload and rxload on the router is low all times.
#sh int g0/0GigabitEthernet0/0 is up, line protocol is up Hardware is i82543 (Livengood), address is 0012.7f8a.8008 (bia 0012.7f8a.8008) Description: ;Link to NORISMP998 G5/2 Internet address is 151.175.19.102/30 MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 2/255, rxload 2/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 1000Mb/s, link type is autonegotiation, media type is SX output flow-control is XON, input flow-control is XON ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 8w2d Input queue: 0/75/522186/1117 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 11667000 bits/sec, 2319 packets/sec 5 minute output rate 9377000
[code]....
View 5 Replies
View Related
Mar 1, 2013
We have a 3750x 24s acting as a root switch for about 10 other 3750x's. Everything else seems fine, but the device stopped forwarding packets to the applied static route. [code]
View 3 Replies
View Related
Jul 23, 2012
router 7200 (12.2(33)SRE1)
two interfaces with traffic going through, placed in a Data-VRF
Another physical interface and loopback interface in the global routing-table.
ip flow ingress on all physical interfaces configured
It was running for at least a year: I was getting netflow packets on my analyzer from the box. Since a couple of weeks I get no netflow-packets anymore.debug ip flow export tells me "IPFLOW: Sending export pak to ... port 2055"
But the packet is not leaving the box. By setting up an ip sla monitor udp-echo I simulated some traffic (udp/2055) which is leaving the box.
[code]...
View 2 Replies
View Related
Nov 21, 2011
I have a stack of 2 C3750-switches (WS-C3750G-24TS-1U) with IPBASE-firmware (12.2(52)SE).
When I ping to a machine (in this case a virtual one), the replies are always received on the port where the machine is connected, but on the port-channel connecting to the stack of the 'pinging device' the reply comes only for certain initiators, and not for all.
Setting:
Gi1/0/6: Device/Server I want to connect too ; defined as access port
Gi1/0/25 + Gi2/0/25, as Port-Channel 1: The location of the devices I connect (read as: the uplink to the stack of the PC's), defined for Dot1Q-trunking
Monitoring setup: Source ports: Both: Gi 1/0/6, Po1 (or Po1 replaced by both interfaces)
For the machines which can ping the server I see 2 echo (ping) requests, followed by 2 echo (ping) replies ... So once seen on the Po1, and once seen on the interface Gi1/0/6.
However for other machines, the 2nd reply is missing ; which must be caused by the dropping of these packets in the switch. At least, I my opinion this must be the reason... But I can't see any (change of) output drops at int Po1, nor at Gi1/0/6. The CPU doesn't seem to have high usage, and even then, I don't think the error would be constant, as it's always failing for some PC's, and never for others... (at least for a certain time, a few hours it can be constant, the problem dissapears from time to time).
View 1 Replies
View Related
Sep 2, 2012
I have two computers. Computer A is connected to the internet through GSM network. Computer A also have NIC adapter which is connected to local network with IP 192.168.33.10/24.
Computer B in connected to internet with DSL connection.
On both machines I use TeamViewer to make VPN secure tunnel between this two computers. Computer A gets IP:7.200.100.2 Computer B gets IP:7.200.100.3
How can I access from computer B to specific device with IP 192.168.33.250 which is on local network of computer A?
Is it possible to route traffic from VPN to other local network, or it is some possibility to use port forwarding from VPN connection to specific IP address on the local network to specific port number?
View 1 Replies
View Related
Apr 5, 2013
We have a PPPoE DSL link with a dedicated IP providing by a small ISP(ISP A) in Canada. We are having trouble reaching a small group of IPs in the US to be able to access some client resources.We have eliminated all possible local issues by removing the firewall and making a direct connection to the ISP. We have also had numerous tests prove successful when we use other local ISPs.
Trace routes show that the packets get dropped a few hops from the destination on a US ISP(ISP B).The routes even appear to be very similar to the other ISPs we tested. We escalated to ISP A and they say that everything is working properly on their end and the problem is with ISP B. They claim they "have no partnership with ISP B and therefore cannot create a ticket to get it resolved". I tried calling ISP B but I get nowhere because I am not a customer of theirs.
My solution is to give ISP A the boot, but management has denied that request because of the amount of effort required to switch over. How I can escalate this? Is there anyway to go over and above the ISPs?
View 4 Replies
View Related
May 31, 2012
From everything I read it seems like DFC is for forwarding packets. When I hear packets I think of layer3. If my 6500s are just being used as a big layer2 only switch do I need a DFC? I am being told the 6500 looks at the layer 2 frame and the layer 3 patch header information before forwarding the frame. How true is this?
View 1 Replies
View Related
Oct 23, 2011
My C6500 is having relatively high CPU (no spikes, but constantly)
I'm under the impression that cef is causing this problem because alot of packets are being processed or send to/from the CPU. [code]
I did a netdr and I can see that the majority of packets going to the CPU are packets for which I have an entry in the CEF table.What can be a reason why those packets don't get hardware switches?I'm running Version 12.2(33)SXH5 - Sup720-10G.
View 4 Replies
View Related
Apr 20, 2012
I am having trouble with my Cisco SG300 switch big time. I have two servers with IP addresses 10.17.0.11 and 10.17.0.29 sitting on the same switch which is a Cisco SG300. I initiate a file transfer from 10.17.0.11 to 10.17.0.29. I could see lots of Dup Acks and retransmissions which means something is wrong in the connection. Further, I could see the session initiation a bit bizarre. I could see two SYN packets sent from 10.17.0.11 to 10.17.0.29 and also two SYN ACK packets returned by 10.17.0.29. The switch forms part of a network but since both the servers are sitting on the same switch I suppose the rest of the network doesn't come into play when one server talks to the other.
See also the number of Dup Acks and retransmissions. The two switch ports connecting the servers have speed and duplex set to auto negotiate, flow control is enabled. What could cause this sort of problem?Could it be any setting on the switch or the servers' NICs?Or could it be a bad switch that causes this?
View 4 Replies
View Related
Apr 17, 2012
i have several cisco 6500 switches, and user switched connected to them.in my example i have a global service vlan, where some access ports are directly connected on the 6500, and this vlan is also allowed on the trunks to the access switch.
now i am connected with ma laptop on a access switch, where my port is in the same vlan. when i do a show mac address-table on my access port, i can see my own mac-address, nothing else.when i start wireshark to see the traffic, all i should see is traffic from or to my MAC, or broadcasts/multicasts.
But i can see other unicast traffic with different source/destination mac than mine.It seem slike these packets get broadcasted over the whole VLAN, but its no broadcast MAC nor IP.
View 4 Replies
View Related
Oct 31, 2011
i am wanting to log dropped and oop packets on a c3825 isr with ios12.3(11)T3. on other routers(like a 2951 running 151-4.M2)i can state ip inspect log drop-pkt and it will log to buffer or syslog all dropped and oop packets. can i do this on this 3825 another way
View 1 Replies
View Related
Oct 7, 2012
on some of our ports on Nexu 5000 and on the connected FEX we can see a lot of Jumbo Packets though there is not enableed any JumboFrame on the Switch, all Interface and system MTU is set to 1500.
DBE-LINZ-XX41# sh int Eth113/1/27
Ethernet113/1/27 is up
Hardware: 100/1000 Ethernet, address: d0d0.fd1b.b69c (bia d0d0.fd1b.b69c)
[Code]....
View 1 Replies
View Related
Apr 17, 2012
We have an ASA5520 running ver 7.0(8), nat-control is disabled. On the "outside" interface we have a closed network which is publicly addressed i.e. no access to Internet. We also have two Vlan interfaces on a trunk connection i.e. "inside" interface (Vlan7) and "dmz" interface (Vlan802). Traffic from the "outside" to "inside" is statically NAT'd such that the public IP is translated to a private IP when accessing the "inside" interface. However, our OSS servers on the "dmz" interface need to be able to receive packets from the public IP addresses on the "outside" . All is okay with the outside to inside traffic and traffic initiated from the OSS servers on the "dmz" to the outside works okay (snmp gets etc) i.e. the servers receive reply packets from the public addresses of the outside devices.
However, traffic that originates on the "outside" interface (snmp traps etc) which is destined for the "dmz" is actually being routed to the "inside" interface and therefore the public source address is being NAT'd by the static NAT command. The access-list "in_on_outside" has relevant entries to allow connectivity from outside to dmz, we have tried a static nat command (outside, dmz) to maintain the public addressing but this made no difference and also a nat exempt. With ########nat-control disabled - do I still need a translation or NAT exempt for the "outside" <> "dmz" traffic flow, if so how should this look ?
View 11 Replies
View Related
Feb 25, 2013
We have two catalyst 3560 switches running c3560-ipbasek9-mz.122-58.SE2.bin They are connected using etherchannel using gi 0/21 - 24 interfaces.
on 3560-1 switch, there isn't any ip-default gateway or ip route configured. It only have 1 interface vlan configured.
on 3560-2 switch, there is ip default gateway configured along with 1 interface vlan.
What i dont understand here is that, i can reach out to other subnets from 3560-1 switch in which the routing is not enabled?
View 4 Replies
View Related
Sep 5, 2011
I have an skill exercise with 4 Routing Protocols Default Route,Static Route,Eigrp, Ospf. I have about 6-7 routers, and each of them has an routing protocol. But the problem is the Main router INTERNET, which it has to use Static in a direction, and default in the opposite path. This is the scheme of routers and how the r.protocol have to be configured.
View 19 Replies
View Related
Feb 26, 2011
The websites I usually go on now have some type of error page when I go to them. So far it has happened to 2 of them though they might not be related.
Here's what the page says:
Site 1- Valenth
Quote:
Warning: mysql_connect() [ function.mysql-connect]: [2002] Connection timed out (trying to connect via tcp://ec2-184-73-84-14.compute-1.amazonaws.com:3306) in /var/www/valenth.com/include/database.class.php on line 25
[Code]....
View 5 Replies
View Related
Sep 4, 2012
i've had this internet problem that has been going on with a wireless laptop i've had since april. it only happens on this computer, and i've tried many solutions. occasionally, i will try and go to pages on google chrome and an error pops up that says "this webpage is not available." when i play games that are online, they get disconnected as well. i've added google chrome and my other browsers to the firewall list and i've also changed the DNS server. when i use the troubleshooter it says something like "router, or modem is not connected to the internet. i've even downloaded the "fix it" program and it detected no problems
View 1 Replies
View Related
Jun 1, 2011
I can't get RDP to work on a specific computer.I've already set it up on the router, know the IP address, and I can get it to work great with the server, but the workstation we want it to go to won't accept it.I checked, it's set to allow RDP, the firewall exception was setup, also turned off the firewall completely, removed the antivirus software, checked TCP/IP filtering on the lan connection, even changed the listening port and still nothing.
View 9 Replies
View Related
Jan 4, 2012
Problem with a conflicting IP address. Basically on a normal running day my wireless is switched on and connected perfect to my internet, however if i want to download any large files i plug my Ethernet to my laptop and disable the wireless from my laptop, instantly then the LAN connection kicks in and im on the internet again as i find download speeds are faster through a LAN. However today my wireless is fine but the second i switch to LAN the ! symbol appears and a message says their is an IP conflict.
View 2 Replies
View Related
Aug 17, 2011
I've been timing out via any FTP client, including FileZilla, FireFTP, and a few others. I even downloaded a few just to see if I could connect with other clients.I contacted my host who can't recreate the issue on their end. I contacted my ISP who instructed me to use my command prompt in order to connect to their server, and that of mozilla. Both times I was able to connect via the command prompt.I don't understand what's going on.If I can connect to the sample sites that my ISP gave me, why can't I connect using an FTP client any longer. What possible change could have been made to have caused that disconnection that happened a few nights ago, and is now causing the timeouts I continue to receive?
View 6 Replies
View Related
