tor 2006-08-03 klockan 14:40 -0700 skrev Arnold Wang: > I'm sorry I forgot it's from the eth0 packet. I do see traffics on wccp0 > as well. > > [root@rcarhlp02 local]# tethereal -i wccp0 > tethereal: WARNING: arptype 778 not supported by libpcap - falling back > to cooked socket. > Capturing on wccp0 > 0.000000 192.168.1.6 -> 192.168.1.7 WCCP 1.0 Here I am > 0.000967 192.168.1.7 -> 192.168.1.6 WCCP 1.0 I see you > 10.435223 192.168.1.6 -> 192.168.1.7 WCCP 1.0 Here I am > 10.436387 192.168.1.7 -> 192.168.1.6 WCCP 1.0 I see you Odd.. I would not expect the WCCP chatter to be seen here... > 14.871173 10.17.11.20 -> 209.131.36.158 TCP 33340 > http [SYN] Seq=0 > Ack=0 Win=5840 Len=0 MSS=1460 TSV=77188263 TSER=0 WS=2 This looks like an intercepted packet. So the GRE probably works.. (maybe... the WCCP stuff above worries me..) For now assuming the GRE does work. What does your iptables rules look like? iptables-save Regards Henrik
Attachment:
signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel
