On Mon, 14 Sep 2009, Andrew Wheal wrote:
I have run the command 'tcpdump -w tcpdump.txt | yum update' and then i used
'tcpdump -r tcpdump.txt' to get the results, below:
reading from file tcpdump.txt, link-type EN10MB (Ethernet)
12:39:09.221619 arp who-has mygateway.ar7 tell sicoserver
12:39:09.225138 arp reply mygateway.ar7 is-at 00:14:6c:10:6e:da (oui Unknown)
12:39:09.225145 IP sicoserver.35396 > mygateway.ar7.domain: 36584+ AAAA?
mirror.bytemark.co.uk. (39)
12:39:09.267061 IP mygateway.ar7.domain > sicoserver.35396: 36584 0/0/0 (39)
12:39:09.267140 IP sicoserver.39452 > mygateway.ar7.domain: 9735+ AAAA?
mirror.bytemark.co.uk. (39)
12:39:09.272099 IP mygateway.ar7.domain > sicoserver.39452: 9735- 1/0/0 (39)
12:39:09.272166 IP sicoserver.35949 > mygateway.ar7.domain: 9418+ A?
mirror.bytemark.co.uk. (39)
12:39:09.276625 IP mygateway.ar7.domain > sicoserver.35949: 9418- 1/0/0
A[|domain]
12:39:09.276778 IP sicoserver.36733 > 1.0.0.0.http: S 509686349:509686349(0)
win 5840 <mss 1460,sackOK,timestamp 220963 0,nop,wscale 7>
12:39:12.276614 IP sicoserver.36733 > 1.0.0.0.http: S 509686349:509686349(0)
win 5840 <mss 1460,sackOK,timestamp 223963 0,nop,wscale 7>
12:39:14.256873 arp who-has sicoserver tell mygateway.ar7
12:39:14.256880 arp reply sicoserver is-at 00:18:f3:67:f7:fe (oui Unknown)
12:39:18.276669 IP sicoserver.36733 > 1.0.0.0.http: S 509686349:509686349(0)
win 5840 <mss 1460,sackOK,timestamp 229963 0,nop,wscale 7>
12:39:28.475768 IP 192.168.0.7.plysrv-https > 239.192.152.143.plysrv-https:
UDP, length 119
12:39:30.276781 IP sicoserver.36733 > 1.0.0.0.http: S 509686349:509686349(0)
win 5840 <mss 1460,sackOK,timestamp 241963 0,nop,wscale 7>
12:39:35.276821 arp who-has mygateway.ar7 tell sicoserver
12:39:35.278773 arp reply mygateway.ar7 is-at 00:14:6c:10:6e:da (oui Unknown)
12:40:10.367175 IP 192.168.0.7.netbios-dgm > 192.168.0.255.netbios-dgm: NBT
UDP PACKET(138)
A lot of this doesn't make sense to me, but I can work out that packets are
being sent to and from my server. What looks strange to me though is that my
server has tried to send packets to "1.0.0.0.http"? Should this not be a
valid IP address?
My 'yum.conf' file has no reference to neither throttle nor bandwidth. Here
is the contents of my file, incase there is something wrong with it:
take the baseurl of the site you cannot connect to and run:
urlgrabber $thaturl/repodata/repomd.xml
see what it says.
-sv
_______________________________________________
Yum mailing list
Yum@xxxxxxxxxxxxxxxxx
http://lists.baseurl.org/mailman/listinfo/yum
