Hello Experts,
With 00:04:23:bb:18:56 being a Linux box, it gets a ping request from a
network device:
05:50:50.393373 00:0c:db:b5:b7:00 (oui Unknown) > 00:04:23:bb:18:56 (oui
Unknown), ethertype IPv4 (0x0800), length 60: 172.20.11.3 >
192.168.70.1: ICMP echo request, id 43981, seq 1, length 24
Before replying (even though it could, since it has the MAC as part of
the ping request) it decides to query for the MAC based on source IP of
the original ping request:
05:50:50.402347 00:04:23:bb:18:56 (oui Unknown) > Broadcast, ethertype
ARP (0x0806), length 42: Request who-has 172.20.11.3 tell 192.168.70.1,
length 28
The tell section indicates to "tell 192.168.70.1", but the interface on
which this came in has an IP of 172.20.11.1. 192.168.70.1 is another IP
on the Linux router, on a different interface.
Shouldn't the ARP request say "tell 172.20.11.1" instead given ARP is an
ethernet protocol, incapable of routing to 192.168.70.1? The reply to
this broadcast never comes back from the other network device due to the
weird "tell 192.168.70.1" being there. The end result is complete ping
loss.
Thanks for any insight,
--Bart
--
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
