Weird sniffer issue... [7:22273]

2001-10-05 Thread McMasters, Eric

Okay I know that you may be getting sick of my sniffer questions since this
is the second one this week, but I've never seen this before, so here goes.

I'm using good ole' Etherpeek and while monitoring a network I started
getting duplicate IP address errors.  After further investigation Etherpeek
shows the MAC address of the router as the conflicting MAC.  This is
happening on several servers supposedly having a duplicate address as the
router interface on the same segment.  I have never ran into this problem
before, so I thought that I would ask the experts.  What is causing this to
happen and why?  

I'm starting to think that computers are the work of the devil!  Routers and
switches to a lesser extent...

TIA,
Eric




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22273&t=22273
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: Weird sniffer issue... [7:22273]

2001-10-05 Thread Puckett, Larry (TIFPC)

I'm certainly not one of the experts on this list, but have seen this before
on a couple of our LAN segments. It turned out that the server group was
using the same IP address on two different NICs on the same server. This was
a process recommended by one of the Windows operating systems to create
redundancy and load sharing at the server level. After an extended trial and
error process, I believe the resolution was to change to a different
manufacturer of NICs. Something about the binding software of something

Larry Puckette
Network Analyst CCNA,MCP,LANCP
Temple Inland
[EMAIL PROTECTED]
512/434-1838

 -Original Message-
From:   McMasters, Eric [mailto:[EMAIL PROTECTED]] 
Sent:   Friday, October 05, 2001 4:46 PM
To: [EMAIL PROTECTED]
Subject:    Weird sniffer issue... [7:22273]

Okay I know that you may be getting sick of my sniffer questions since this
is the second one this week, but I've never seen this before, so here goes.

I'm using good ole' Etherpeek and while monitoring a network I started
getting duplicate IP address errors.  After further investigation Etherpeek
shows the MAC address of the router as the conflicting MAC.  This is
happening on several servers supposedly having a duplicate address as the
router interface on the same segment.  I have never ran into this problem
before, so I thought that I would ask the experts.  What is causing this to
happen and why?  

I'm starting to think that computers are the work of the devil!  Routers and
switches to a lesser extent...

TIA,
Eric




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22280&t=22273
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Weird sniffer issue... [7:22273]

2001-10-05 Thread Neil Desai

EtherPeek alerts you to a duplicate IP address if it has different MAC
address for the same IP address. Could this be an issue with proxy arp on
the router?
Neil



""McMasters, Eric""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Okay I know that you may be getting sick of my sniffer questions since
this
> is the second one this week, but I've never seen this before, so here
goes.
>
> I'm using good ole' Etherpeek and while monitoring a network I started
> getting duplicate IP address errors.  After further investigation
Etherpeek
> shows the MAC address of the router as the conflicting MAC.  This is
> happening on several servers supposedly having a duplicate address as the
> router interface on the same segment.  I have never ran into this problem
> before, so I thought that I would ask the experts.  What is causing this
to
> happen and why?
>
> I'm starting to think that computers are the work of the devil!  Routers
and
> switches to a lesser extent...
>
> TIA,
> Eric




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=22319&t=22273
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]