Home.... | log in.... | Pub my question! | Sign-up....
Java-index >> General >> Sun Networking Services and Protocols

snooping ntp igmp packets

I need to show the network guy that Solaris ntp is sending igmp packets. How do I setup snoop to capture igmp packets?Thanks,Glen
[150 byte] By [sysglen] at [2007-11-26 10:40:33]
«« Help Required: Moving a Non Global Zone . . .
»» Sorting a table using virtual forms
# 1
I believe igmp is a multicast protocol?I might start withsnoop multicast not broadcastand see what you get at that point.-- Darren
Darren_Dunham at 2007-7-7 2:52:01 > top of Java-index,General,Sun Networking Services and Protocols...
# 2

Thanks, using snoop -o /tmp/snoop.out multicast I found the following from a server that is working.

ETHER: -- Ether Header --

ETHER:

ETHER: Packet 11 arrived at 10:08:1.42

ETHER: Packet size = 42 bytes

ETHER: Destination = 1:0:5e:0:1:1, (multicast)

ETHER: Source= 0:3:ba:d1:23:2b,

ETHER: Ethertype = 0800 (IP)

ETHER:

IP:-- IP Header --

IP:

IP:Version = 4

IP:Header length = 20 bytes

IP:Type of service = 0x00

IP: xxx. .... = 0 (precedence)

IP: ...0 .... = normal delay

IP: .... 0... = normal throughput

IP: .... .0.. = normal reliability

IP: .... ..0. = not ECN capable transport

IP: .... ...0 = no ECN congestion experienced

IP:Total length = 28 bytes

IP:Identification = 46070

IP:Flags = 0x0

IP: .0.. .... = may fragment

IP: ..0. .... = last fragment

IP:Fragment offset = 0 bytes

IP:Time to live = 1 seconds/hops

IP:Protocol = 2 (IGMP)

IP:Header checksum = 07c8

IP:Source address = 10.19.19.14, janice

IP:Destination address = 224.0.1.1, NTP.MCAST.NET

IP:No options

IP:

I assume this is an NTP related IGMP packet requesting IP 10.19.19.14 to be included in the NTP (224.0.1.1) multicast group.

A snoop of the server that is failing is not sending IGMP packets.

Do you know who/what controls IGMP NTP packets?

Thanks for the help,

Glen

sysglen at 2007-7-7 2:52:01 > top of Java-index,General,Sun Networking Services and Protocols...
# 3

Not directly, no. I assume you've verified that the version and the configuration on both servers is identical?

Unfortunately the version of NTP distributed with Solaris is ancient. You could pull down and compile a modern version and see if the behavior is the same or not. If it's the same, folks in the ntp newsgroup might be able to help.

--

Darren

Darren_Dunham at 2007-7-7 2:52:01 > top of Java-index,General,Sun Networking Services and Protocols...
# 4

Well, a quick look at the xntpd man page indicates a couple of config options in /etc/inet/ntp.conf that might be relevant

broadcast

broadcastclient

multicastclient

look likely.

Also whether the daemon was started with the -m flag.

As darren said, compare the configs of the 2 servers...

robertcohen at 2007-7-7 2:52:01 > top of Java-index,General,Sun Networking Services and Protocols...
# 5

The end of the year is near and I'm cleaning up my posts to the forms so,

As a follow up, in the end the problem was/is that Solaris is choosing the wrong network interface for mulitcasting at boot time.

Thanks for the help,

sysglen

(PS. by allocating Duke Dollars to your posts you can find those with unrewarded $'s using the "My Duke Dollars" link. :) )

sysglen at 2007-7-7 2:52:01 > top of Java-index,General,Sun Networking Services and Protocols...
General
Sun Networking Services and Protocols

General New Topic

General Hot Topic

General

All Classified