Mailinglist Archive: opensuse (3605 mails)
| < Previous | Next > |
Re: [SLE] Problem with W2003 Server causing Martian source...filling logs
- From: Boyd Lynn Gerber <gerberb@xxxxxxxxx>
- Date: Wed, 7 Jun 2006 21:55:58 -0600
- Message-id: <Pine.LNX.4.63.0606072147120.14057@xxxxxxxxxxxxxxx>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> On Thursday 08 June 2006 03:50, Boyd Lynn Gerber wrote:
> > Thanks, I thought I had put this information in. We have two network
> > cards. One with public IP a block of 16. The other is an internal
> > network on 198.60.2.0/24.
>
> Considering the rest of your email, I'm guessing this was a typo
Yes, It should have been 198.168.2.0/24. The public IP has a 198.60.X.X
address.
> > They have machines coming up and down. They
> > use all the IP's in this block at one time or an other. This machine is
> > 192.168.2.85 and the MS win 2003 server is 192.168.2.35. I do not
> > remember the exact address. All have the same netmask which should
> > exclude this 192.168.30.32 address.
>
> I guess so too, since if the netmask included that IP, it wouldn't be a
> martian
>
> > The stupid MS server is spewing out
> > this even though it should not. The MS Admin says he does not know what
> > on his server is giving this error to the linux box.
>
> Something on that machine obviously thinks it has that address. Is it running
> some sort of virtual machine perhaps, like Vmware? If so, then perhaps it's
> misconfigured. I've seen it happen, when the guest OS (with a fake
> vmware-private IP) suddenly gets direct access to the LAN
The MS Admin says that it is only running W 2003 Server.
> > I do not know else to sugest. All I know is the mac address coresponds to
> > the MS Server.
>
> The quickest way would be to run a network trace, for example ethereal, until
> you've captured a few of these packets. Then you can see what it's trying to
> do, and that should give some idea about what's going on
That is what I have been trying to do. I do not see any real clue as what
is sending it.
> > They have over 200 machines on and off at any one time. All the internal
> > machines use the same wiring on this internal network. The MS addmin may
> > not really know what he is talking about. They did have a Novell Network
> > on this wiring as well. He thinks that everything is a MS Network. As
> > they replaced the Novell Network with MS after the Novell announcement.
>
> Which announcement was that?
About no further NetWare development and what appeared to be lack of
direction. They bought the MS line about Novell abandoning Netware. I
did not really listen to all their rantings. I feel lucky to have gotten
a SUSE Linux in to replace the UnixWare box. The MS reps... have been
really lobbying them. Lucky my Reputation and things I provide convinced
them to not use MS for their web, email, and business presence. They are
using Interchange, combined with php for their online book store.
Thanks,
- --
Boyd Gerber <gerberb@xxxxxxxxx>
ZENEZ 1042 East Fort Union #135, Midvale Utah 84047
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/
iD8DBQFEh5/PVtBjDid73eYRAuOWAJ9ikWgknGv+FK75LX3RQWyVzeaAzQCeM773
M8JmuL22tqrPrFAuqAH+P3w=
=pMOs
-----END PGP SIGNATURE-----
--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@xxxxxxxx
Hash: SHA1
> On Thursday 08 June 2006 03:50, Boyd Lynn Gerber wrote:
> > Thanks, I thought I had put this information in. We have two network
> > cards. One with public IP a block of 16. The other is an internal
> > network on 198.60.2.0/24.
>
> Considering the rest of your email, I'm guessing this was a typo
Yes, It should have been 198.168.2.0/24. The public IP has a 198.60.X.X
address.
> > They have machines coming up and down. They
> > use all the IP's in this block at one time or an other. This machine is
> > 192.168.2.85 and the MS win 2003 server is 192.168.2.35. I do not
> > remember the exact address. All have the same netmask which should
> > exclude this 192.168.30.32 address.
>
> I guess so too, since if the netmask included that IP, it wouldn't be a
> martian
>
> > The stupid MS server is spewing out
> > this even though it should not. The MS Admin says he does not know what
> > on his server is giving this error to the linux box.
>
> Something on that machine obviously thinks it has that address. Is it running
> some sort of virtual machine perhaps, like Vmware? If so, then perhaps it's
> misconfigured. I've seen it happen, when the guest OS (with a fake
> vmware-private IP) suddenly gets direct access to the LAN
The MS Admin says that it is only running W 2003 Server.
> > I do not know else to sugest. All I know is the mac address coresponds to
> > the MS Server.
>
> The quickest way would be to run a network trace, for example ethereal, until
> you've captured a few of these packets. Then you can see what it's trying to
> do, and that should give some idea about what's going on
That is what I have been trying to do. I do not see any real clue as what
is sending it.
> > They have over 200 machines on and off at any one time. All the internal
> > machines use the same wiring on this internal network. The MS addmin may
> > not really know what he is talking about. They did have a Novell Network
> > on this wiring as well. He thinks that everything is a MS Network. As
> > they replaced the Novell Network with MS after the Novell announcement.
>
> Which announcement was that?
About no further NetWare development and what appeared to be lack of
direction. They bought the MS line about Novell abandoning Netware. I
did not really listen to all their rantings. I feel lucky to have gotten
a SUSE Linux in to replace the UnixWare box. The MS reps... have been
really lobbying them. Lucky my Reputation and things I provide convinced
them to not use MS for their web, email, and business presence. They are
using Interchange, combined with php for their online book store.
Thanks,
- --
Boyd Gerber <gerberb@xxxxxxxxx>
ZENEZ 1042 East Fort Union #135, Midvale Utah 84047
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/
iD8DBQFEh5/PVtBjDid73eYRAuOWAJ9ikWgknGv+FK75LX3RQWyVzeaAzQCeM773
M8JmuL22tqrPrFAuqAH+P3w=
=pMOs
-----END PGP SIGNATURE-----
--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@xxxxxxxx
| < Previous | Next > |