strange outbound network delay on rp3110 hpux11.23

[Steve Post]

When I print to a jetdirect printer 10 feet away, I works fine. But I have to stare at the printer for 2 minutes.

When I ssh out of the box, I have to wait 2 minutes before I see ANY response.

When I ssh into the box, I get in right away.

So to recap: network thingy going into box is fine. network thingy going out of box has 2 minute delay.

Any idea where I should look to debug it?

I DID run bastille. I DID set it up in trusted mode. I THINK there might me some type of ip-port filter. But I don't know what it would be called.

I bet that even questions on this issue will be useful.

steve

[Peter Godron]

Steve,
has it always been this way ?
Have you changed any routing info/ default gateways (netstat -r)?
Any errors on the cards (netstat -i) ?

[Steven E. Protter · Accepted solution]

Shalom steve,

Nice name.

Yes, IP-Filter can cause this, though normally it would have just stopped the traffic totally.

Trusted system does not do this.

The most likely cause however is:
1) Delay in DNS resolution. If you let bastille touch DNS this could be an issue. It could also be a problem with DNS in your office.

The way around this is normally to make sure /etc/nsswitch.conf has files first.

Have an entry in /etc/hosts that includes the printer and the local system.

Make sure any setup on the print server is sane and responds quickly.

2) You may if you suspect Bastille, wish to run the undo function and do a test. If this fixes the problem then you have to find a way to do the Bastille work that doesn't dirupt printing.

SEP

[Steve Post]

The problem was in resolv.conf.
The ip address of the DNS server I was using was wrong. I fixed the ip. The problem went away.

I wasn't really using DNS for resolving ip addresses. So you would think a bad entry in resolv.conf wouldn't have an effect. Well, I did have it continue on to DNS if it failed to find the hostname in the files. I have that word "DNS" in nsswitch.conf. So the box would spend 2 minutes trying to get DNS stuff out of a ficticious host via an invalid ip address.

Thanks for the help.
steve