[EMAIL PROTECTED] schrieb:
hallo,
ich habe hier ein eigenartiges verhalten bei dem ich nicht so richtig
weiterkomme: IPv6 faehige Rechner, welche einige Minuten keinen IPv6
Traffic gehabt haben und wieder ein Paket versenden wollen, senden die
IPv6 Pakete voruebergebend an eine falsche MAC-addresse.
Wer hat denn diese "falsche" MAC-Adresse am Netz (die beiden erwähnten
MACs sind von Intel-NICs), oder hängt der Router mit beiden Beinchen im
Netz?
Schau mal dazu auch mit
# ip neigh show
# ip -6 route show
hier noch das tcpdump vom host:
16:37:19.367118 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 1, length 64
16:37:20.370703 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 2, length 64
16:37:21.370676 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 3, length 64
16:37:22.370606 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 4, length 64
16:37:23.370575 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 5, length 64
16:37:24.370468 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 86: fe80::250:56ff:fe95:16fb >
fe80::204:23ff:fec1:c435: ICMP6, neighbor solicitation, who has
fe80::204:23ff:fec1:c435, length 32
Hier frägt er 00:04:23:c1:c4:00, wer fe80::204:23ff:fec1:c435 hat, das
ist schon seltsam genug - denn das paßt nicht zusammen.
Ich vermute, RAs kommen auch aus dem Interface 00:04:23:c1:c4:00 mit
selbiger LL-Adresse, aber mit IPv6-Adresse fe80::204:23ff:fec1:c435.
16:37:24.370481 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 6, length 64
16:37:25.370440 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 86: fe80::250:56ff:fe95:16fb >
fe80::204:23ff:fec1:c435: ICMP6, neighbor solicitation, who has
fe80::204:23ff:fec1:c435, length 32
16:37:25.370531 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 7, length 64
16:37:26.370391 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 86: fe80::250:56ff:fe95:16fb >
fe80::204:23ff:fec1:c435: ICMP6, neighbor solicitation, who has
fe80::204:23ff:fec1:c435, length 32
Immer noch erfolgloses NS.
16:37:26.370470 00:50:56:95:16:fb > 00:04:23:c1:c4:00, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 8, length 64
16:37:27.380341 00:50:56:95:16:fb > 33:33:ff:c1:c4:35, ethertype IPv6
(0x86dd), length 86: 2001:638:902:200f:250:56ff:fe95:16fb >
ff02::1:ffc1:c435: ICMP6, neighbor solicitation, who has
fe80::204:23ff:fec1:c435, length 32
Endlich aufgegeben, Multicast NS für die Adresse geschickt.
16:37:27.380714 00:04:23:c1:c4:35 > 00:50:56:95:16:fb, ethertype IPv6
(0x86dd), length 86: 2001:638:902:200f::1 >
2001:638:902:200f:250:56ff:fe95:16fb: ICMP6, neighbor advertisement, tgt
is fe80::204:23ff:fec1:c435, length 32
Entsprechende Antwort (schau mal mit -s 1518 -v, welche LL-Adress da
mitkommt).
16:37:27.380744 00:50:56:95:16:fb > 00:04:23:c1:c4:35, ethertype IPv6
(0x86dd), length 118: 2001:638:902:200f:250:56ff:fe95:16fb >
2001:7b8:3:1e:290:27ff:fe0c:5c5e: ICMP6, echo request, seq 9, length 64
16:37:27.405150 00:04:23:c1:c4:35 > 00:50:56:95:16:fb, ethertype IPv6
(0x86dd), length 118: 2001:7b8:3:1e:290:27ff:fe0c:5c5e >
2001:638:902:200f:250:56ff:fe95:16fb: ICMP6, echo reply, seq 9, length 64
Monitore mal die RAs.
Servus,
Peter
--
ipv6 mailing list
[email protected]
http://listserv.uni-muenster.de/mailman/listinfo/ipv6
