Re: OT: ping puzzler

2002-03-07 Thread Nigel Pauli
On Tuesday 05 March 2002 19:25, dave mallery wrote:
 On Tue, 5 Mar 2002, Nigel Pauli wrote:
  I'd be grateful if someone can set my mind at rest on this one.
 
  I've got a network 10.0.0.0/255.255.255.0. A DHCP server running on
  NT4 at 10.0.0.3 looks after a scope running from 10.0.0.25 to
  10.0.0.225 with 10.0.0.200 to 10.0.0.225 excluded from the scope.
 
  As you can see I've got plenty of leftover addresses to play with
  and I've used all the ones 10.0.0.1 to 10.0.0.6 on various
  statically addressed servers.
 
  Today I was setting up a new box and thought I'd better check if
  10.0.0.7 was available so I pinged 10.0.0.7 and got a reply; but as
  far as I know nothing is using that IP address. The same happens
  for 10.0.0.8 and 10.0.0.9 but once I move into double figures
  (10.0.0.10) I get what I expect i.e., no reply.
 
  Is it possible that some card is replying on more than one address
  or do I need to get out there and find who or what is stealing my
  bandwidth?
 
  Nigel

 I'd start one of those pings and then go look at my hub...

Thanks. In the end that's what I did - and found a couple of little 
D-Link devices that do something about joining fibre optic to UTP. I 
only learn about new areas when I have to do something in the area. So 
this just goes to show that our network cabling has been blessedly 
trouble free. Funny thing is that they've been there right over a 
change from a public network to our present private one.

Nigel

-- 
Nigel Pauli - I.T. Manager
St. John's School, Northwood, U.K.
http://www.st-johns.org.uk/



Re: OT: ping puzzler

2002-03-05 Thread dave mallery
On Tue, 5 Mar 2002, Nigel Pauli wrote:

 I'd be grateful if someone can set my mind at rest on this one.
 
 I've got a network 10.0.0.0/255.255.255.0. A DHCP server running on NT4 
 at 10.0.0.3 looks after a scope running from 10.0.0.25 to 10.0.0.225 
 with 10.0.0.200 to 10.0.0.225 excluded from the scope.
 
 As you can see I've got plenty of leftover addresses to play with and 
 I've used all the ones 10.0.0.1 to 10.0.0.6 on various statically 
 addressed servers.
 
 Today I was setting up a new box and thought I'd better check if 
 10.0.0.7 was available so I pinged 10.0.0.7 and got a reply; but as far 
 as I know nothing is using that IP address. The same happens for 
 10.0.0.8 and 10.0.0.9 but once I move into double figures (10.0.0.10) I 
 get what I expect i.e., no reply.
 
 Is it possible that some card is replying on more than one address or 
 do I need to get out there and find who or what is stealing my 
 bandwidth?
 
 Nigel
 
I'd start one of those pings and then go look at my hub...


-- 
Dave Mallery, K5EN  (2.2r5 potato)
PO Box 520
Ramah,  NM  87321

no gates .~.
  no windows...  /V\
/( )\
running Debian GNU/Linux^^-^^  (Linux is a trademark of Linus Torvalds)
  free at last!




Re: OT: ping puzzler

2002-03-05 Thread Vineet Kumar
* Nigel Pauli ([EMAIL PROTECTED]) [020305 05:36]:
 I'd be grateful if someone can set my mind at rest on this one.
 
 I've got a network 10.0.0.0/255.255.255.0. A DHCP server running on NT4 
 at 10.0.0.3 looks after a scope running from 10.0.0.25 to 10.0.0.225 
 with 10.0.0.200 to 10.0.0.225 excluded from the scope.
 
 As you can see I've got plenty of leftover addresses to play with and 
 I've used all the ones 10.0.0.1 to 10.0.0.6 on various statically 
 addressed servers.
 
 Today I was setting up a new box and thought I'd better check if 
 10.0.0.7 was available so I pinged 10.0.0.7 and got a reply; but as far 
 as I know nothing is using that IP address. The same happens for 
 10.0.0.8 and 10.0.0.9 but once I move into double figures (10.0.0.10) I 
 get what I expect i.e., no reply.
 
 Is it possible that some card is replying on more than one address or 
 do I need to get out there and find who or what is stealing my 
 bandwidth?

/usr/sbin/arp might help you see what hardware addresses your kernel has
in its table for those IP addresses, which should tell you who's
responding to your pings. It should at least be easy to see if they're
all coming from the same place, if not recognize the address as one of
your machines or some mystery machine (like, zoiks, scoob!)

good times,
Vineet

-- 
Currently seeking opportunities in the SF Bay Area
Please see http://www.doorstop.net/resume/


pgpIq8pjLkFHI.pgp
Description: PGP signature