[KLUG Members] New SuSE installation

[Adam Williams]

> ------------begin tcpdump----------------
> Here's a complete tcpdump from one of the failed attempts.  Looks to
> me like it's making some kind of attempt, but I can't decipher much
> more than that.
>
> 16:05:37.301854 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:05:40.301358 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:05:42.301382 arp who-has router.local tell 10.0.0.14
> 16:05:42.304541 arp reply router.local is-at 0:a0:c5:e0:45:d
> (0:a0:c9:8d:4a:1e)
> 16:05:46.301549 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:05:58.301964 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:06:22.302763 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:07:10.304395 10.0.0.14.1026 > ftp.suse.com.ftp: S [ECN-Echo,CWR]
> 4245204564:4
> 16:07:15.304523 arp who-has router.local tell 10.0.0.14
> 16:07:15.307204 arp reply router.local is-at 0:a0:c5:e0:45:d
> (0:a0:c9:8d:4a:1e)
> -------------end tcpdump-------- sorry about the ugly formatting

So the FTP server is remote?  (Hence the router and the ftp.suse.com
name.)  Try disableing ECN.  What brand/type of device is 0:a0:c5:e0:45:d?

It is interesting that we don't see any packets coming back from the
conntection attempt,  makes me think ECN incompatibility.