[KLUG Members] MAC/IP conflict

[Peter Buxton]

On Fri, Nov 08, 2002 at 09:31:27PM -0500, Bruce Smith wrote:

> > Okay, I thought I was a bright boy, but obviously not. <rueful grin> What
> > is a good tool for network monitoring with:
> 
> I don't get it.  Why are you still having this problem?
> Can't you just fix the conflict and be done with it?

Because the source of the conflict is far from clear. NOTHING in the
logs is indicating what is resetting my connections. All I know is that
the box refuses all contact after dumping me off for a minute or two and
then it lets me back on until it dumps me again with *no* evidence of
problems whatsoever.

This started Monday. That's my total clue. It probably started over the
weekend but no one was there to complain, so therefore, according to
logic, it didn't exist. ;-)

Today, with the laser printer unplugged, I had a clean day until about
4:30 and then people started noticing dumped Samba sessions. Something
is doing something VERY strange and I may very well end up lying down in
the closet, with the server, watching iptraf for clues. My next thing,
perhaps, this evening, will consist of fiddling at CARES over ssh until
I am dumped off, removing one machine from the network, logging back in,
and waiting until I am dumped again-- or installing a desk in the
closet, either way. The server is on a bottom shelf with a broken
monitor next to it. Not much room in there, and not many good places to
put it outside.

> I've never tried it, but I've heard good things about "arpwatch".
> 
> If you find it useful, maybe you could do a presentation on it?
> 
> > 2. unless I get an X server running on this box soon, preferably a tty app.
> 
> Huh?

Unless I get an X server on the cares machine, the cares machine will
only run console apps because otherwise I'll be watching ethereal, say,
bored out of my skull, on my home machine monitoring the CARES network
until all the tcp connections dump at which point, of course, ethereal
will be totally useless because its data about the crash will never be
transmitted because the TCP connections died.... get it?

-- 
for gpg key: http://killdevil.org/~peter
[The Basement Tapes were] like the Watergate tapes... Bob
would say, 'We should destroy this.' -- Robbie Robertson