topic Re: Odd entry in netstat in Operating System - HP-UX

Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 09:11:51 GMT

I have a server in Kuwait and am able to connect OK from the UK, but can ping to the server back in the UK I have logged on from to Kuwait.
The output of netstat -rn on the Kuwait server is attached,

The parts of my /etc/rc.config.d/netconf on Kuwait server is
HOSTNAME="ku912_1"
OPERATING_SYSTEM=HP-UX
LOOPBACK_ADDRESS=127.0.0.1

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=164.39.151.90
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=164.39.151.255
LANCONFIG_ARGS[0]="ether"
DHCP_ENABLE[0]=0
ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=164.39.4.240
ROUTE_COUNT[0]=1
ROUTE_ARGS[0]=""

The IP address of the server in the UK is 164.39.9.50.

I believe the line in netstat output showing
164.39.9.0 164.39.4.240 UG

I have tried a
route delete 164.39.9.0 164.39.4.240

and re booted the server.

Still no effect.

Any ideas ?

Re: Odd entry in netstat

Tom Geudens — Sat, 03 Aug 2002 09:33:22 GMT

Hi,
Is it possible to post the /etc/rc.config.d/netconf of the UK server as well ? And the output of a "traceroute" from the Kuwait to the UK server ?

Regards,
Tom

Re: Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 09:49:17 GMT

HI Tom
netconf of UK machine is
HOSTNAME="gb898_m"
OPERATING_SYSTEM=HP-UX
LOOPBACK_ADDRESS=127.0.0.1
INTERFACE_NAME[0]=lan1
IP_ADDRESS[0]=164.39.9.50
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=""
LANCONFIG_ARGS[0]="ether"
DHCP_ENABLE[0]=0
ROUTE_DESTINATION[0]="default"
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=164.39.9.1
ROUTE_COUNT[0]=1
ROUTE_ARGS[0]=""

Traceroute shows
traceroute to gb898_m(164.39.9.50), 30 hops max, 20 byte packets
1 gb898x25 (164.39.4.240) 2911 ms3827 ms1512 ms
2 164.39.28.230 (164.39.28.230) 1281 ms
164.39.28.215 (164.39.28.215) 707 ms
164.39.28.219 (164.39.28.219) 1326 ms
3 * * *
4 * * *

After this just shows the * * *

Basically the last IP a address 164.39.28.219
is in the UK so. I checked this first and then assumed the entry in netstat -rn was issue as the next subnet would be 164.39.9.

Thanks
Paul

Re: Odd entry in netstat

Tim D Fulford — Sat, 03 Aug 2002 09:53:59 GMT

Am I missing something here? But the default route is on another subnet.

If the netmask was 255.255.0.0 then I would see no problems.

I also do not see an interface for the default route in the netstat -rn it just says "x00"

Reagards

Tim

Re: Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 10:07:51 GMT

Tim
Do you refer to the netmask on the Kuwait server or UK server.

Both shows
SUBNET_MASK[0]=255.255.255.0

??

Thanks
Paul

Re: Odd entry in netstat

Tom Geudens — Sat, 03 Aug 2002 10:15:29 GMT

Hi,
I think Tim has hit upon the problem. The gateway on the UK side is in the same subnet as the server itself. This is not the case on the Kuwait side. I would take a look at that issue first ...

Regards,
Tom

Re: Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 10:23:56 GMT

Tim/Tom

By this, excuse me as I am not really the network sort of person. From my understanding.

On Kuwait server. The gateway is.
164.39.4.240

Where as the subnet is 255.255.255.0 using an ip address of 164.39.151.90

There by on a different subnet. .151 and .4

The UK server has a gateway of
164.39.9.1
The subnet of 255.255.255.0 using an IP of 164.39.9.50.

Thereby the gatway and the IP address are on the same subnet ? In this case 164.39.9 ??

Thanks
Paul

What would be the best way to resolve this.

Change the subnet on UK server to 255.255.0.0. Would this affect the IP address ??

Re: Odd entry in netstat

Tom Geudens — Sat, 03 Aug 2002 10:34:48 GMT

Paul,
I'm not a network person myself, but the way I understand it, the server and the gateway should be on the same subnet. And this is indeed the case on the UK side, not on the Kuwait side. So you should check the Kuwait configuration. What I would do is contact the network guys and check that Kuwait gateway. Either that is wrong (and if the "logic" of your complete network holds, it should be 164.39.151.1) or there is something wrong with the subnet mask. Even so, I would not alter this without checking with the network guys ... because you should alter it on ALL your servers then.

As you can see, not easy ...
Tom

P.S. Tim (or anyone else) please correct me if I'm talking "bullsh*t" here !!!

Re: Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 10:39:43 GMT

Tim/Tom.

Thanks for your help.

I will speak with the network dept on Monday.

I was not sure, but that was my understanding, although very basic, the gateway and the IP should be on the same subnet.

Thanks again
Paul

Re: Odd entry in netstat

Tom Geudens — Sat, 03 Aug 2002 10:52:40 GMT

Hi Paul,
Keep us posted ... I'm very interested in the solution myself !!!

Regards,
Tom ;-)

P.S. N/A for this reply please.

Re: Odd entry in netstat

Paul Thomson_2 — Sat, 03 Aug 2002 10:57:43 GMT

Tom, will attempt to keep you posted.

Re: Odd entry in netstat

Steven Mertens — Sat, 03 Aug 2002 13:34:30 GMT

hi,

the gateway thingy is idd odd.

- can you login from the kuwait server to
the uk server ?
- are you sure your ping probes arent block
by some sort of firewall ? icmp maybe
get blocked.
- you can check this with a scanner like
nmap.

rgds,

Steven

Re: Odd entry in netstat

Paul Thomson_2 — Tue, 06 Aug 2002 13:41:33 GMT

Guys

Just a quick update.

Seems the issue here was...

The X25 'box' here was decommissioned 2 weeks ago which Kuwait was connecting in to.
He has temporarily switched this back on, but will investigate connecting the X25 link directly into the router here.
He will advise the outcome tomorrow.

Will keep you posted.