Re: How to find process causing periodic DEST_UNREACH replies?
Hi,
Thanks for the tip about tcpdump. It seems the ntp service is
the responsible. I'll check the list of the ntp servers to see if
some of them is obsolete.
Anyway just in case I misinterpreted something...
I live in Switzerland, and I have a ZyXEL Prestige 642R DSL
router connected to the ADSL line, which performs some NAT and
firewalling. The I connect my PCs through an ethernet switch to
the router.
I attach a piece of the ippl log and the tcpdump output...
Many thanks again!
best regards,
Balazs
On Wed, Jan 09, 2002 at 10:21:28PM +0100, martin f krafft wrote:
>also sprach Balazs Javor <jb3@freemail.hu> [2002.01.09.2130 +0100]:
>> Recently I've installed some IP logging packages like ippl.
>> A few days ago a lot of ICMP - destination unreachable - bad port
>> messages started showing up comming from my DSL router.
>
>are you behind a firewall?
>what's the exact ICMP subcode?
>
>> Unfortunatly the log shows only that they come from the router
>> and nothing more.
>
>are you using pppoe or ethernet for DSL? (where do you live?)
>
>> Is it somehow possible to find out which process that is, so that
>> I can find the real problem?
>
>get the packets with
>
>tcpdump icmp
>
>at the very least, they contain the first couple of bytes of the IP
>datagram that caused them.
>
>--
>martin; (greetings from the heart of the sun.)
> \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
>
>fermentation fault.
>coors dumped.
Jan 9 20:02:02 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:02:02 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:02:09 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:02:09 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:18:54 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:18:54 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:19:06 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:19:06 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:19:14 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:19:14 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:35:59 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:35:59 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:36:12 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:36:12 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:36:19 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:36:19 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:05 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:05 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:15 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:15 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:25 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
Jan 9 20:53:25 zhadum ippl: ICMP message type destination unreachable - bad port from router [192.168.1.1] (192.168.1.1->192.168.1.2)
23:09:38.791386 router > zhadum icmp: line-zh-103-027.adsl.econophone.ch udp port ntp unreachable [tos 0x10]
Reply to: