[KLUG Members] re: New SuSE installation

[Mike Williams]

On Thu, 18 Jul 2002 12:00:01 -0400, 
members-request@kalamazoolinux.org wrote:
>Message: 8
>Date: Thu, 18 Jul 2002 10:41:32 -0400 (EDT)
>From: Adam Williams <adam@morrison-ind.com>
>To: <members@kalamazoolinux.org>
>Subject: Re: [KLUG Members] New SuSE installation
>Reply-To: members@kalamazoolinux.org
>
>> ------------begin tcpdump----------------
>> Here's a complete tcpdump from one of the failed attempts.  Looks 
to
>> me like it's making some kind of attempt, but I can't decipher 
much
>> more than that.
>>
>> 16:05:37.301854 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:05:40.301358 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:05:42.301382 arp who-has router.local tell 10.0.0.14
>> 16:05:42.304541 arp reply router.local is-at 0:a0:c5:e0:45:d
>> (0:a0:c9:8d:4a:1e)
>> 16:05:46.301549 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:05:58.301964 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:06:22.302763 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:07:10.304395 10.0.0.14.1026 > ftp.suse.com.ftp: S 
[ECN-Echo,CWR]
>> 4245204564:4
>> 16:07:15.304523 arp who-has router.local tell 10.0.0.14
>> 16:07:15.307204 arp reply router.local is-at 0:a0:c5:e0:45:d
>> (0:a0:c9:8d:4a:1e)
>> -------------end tcpdump-------- sorry about the ugly formatting
>
>So the FTP server is remote?  (Hence the router and the ftp.suse.com
>name.)  Try disableing ECN.  What brand/type of device is 
0:a0:c5:e0:45:d?

That's my router.  Netgear RT328 (one ISDN port, one ethernet).  It's 
running NAT to a static IP, and has yet to screw anything up.  

>It is interesting that we don't see any packets coming back from the
>conntection attempt,  makes me think ECN incompatibility.

What's ECN?  I see it in the log but I'm not familiar with the term.

So SuSE put on their FTP server a CD image with download code that is 
not compatible with their FTP server?  That's pretty bad.
-- 
Mike Williams, knightperson@zuzax.com on 07/18/2002