LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

[lvs-users] Keepalived + LVS-DR not working

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: [lvs-users] Keepalived + LVS-DR not working
From: Gerry Reno <greno@xxxxxxxxxxx>
Date: Sat, 21 Jul 2007 20:58:24 -0400
Finally took some time and I am trying the LVS-DR setup.  Read the HOWTO 
plus a bunch of other articles on doing this.  So when I finished the 
configs I fired up keepalived, checked ipvsadm -l and saw the real 
server entries, pointed my browser at the new VIP and, and, and, .... 
nothing.
Checked ipvsadm and I could see an InactConn on one of the real servers 
so I tried it again and then I could see another InactConn on the other 
real server so I knew the scheduler (rr) was working.  I used the 
'arp_ignore/arp_announce' method to deal with the ARP issue and I 
doublechecked to make sure the kernel had loaded the settings.  So now 
scratch head??? 

Gerry



Here's the config and some outputs:

Here's my test setup:
VIP = 192.168.1.240

director1        director2
192.168.1.150    192.168.1.151
|                     |
|                     |
-----------|-----------
           |
           |
-----------|-----------
|                     |
|                     |
realserver1      realserver2
192.168.1.200    192.168.1.201

DIRECTORS 1 + 2
===============================================
! keepalived.conf
! BACKUP is same except for state BACKUP, priority 100
vrrp_instance VI_1 {
        state MASTER
        interface eth0
        track_interface {
                eth0
        }
        lvs_sync_daemon_interface eth0
        virtual_router_id 25
        priority 150
        advert_int 2
        authentication {
                auth_type PASS
                auth_pass tps
        }
        virtual_ipaddress {
                192.168.1.240/24
        }
        notify_master "/etc/keepalived/ip_localhost del"
        notify_backup "/etc/keepalived/ip_localhost add"
        notify_fault "/etc/keepalived/ip_localhost add"
}

virtual_server 192.168.1.240 80 {
        delay_loop 5
        lb_algo rr
        lb_kind DR
        protocol TCP
        real_server 192.168.1.200 80 {
                weight 1
                inhibit_on_failure
                TCP_CHECK {
                        connect_port 80
                        connect_timeout 3
                        nb_get_retry 3
                        delay_before_retry 1
                }
        }
        real_server 192.168.1.201 80 {
                weight 1
                inhibit_on_failure
                TCP_CHECK {
                        connect_port 80
                        connect_timeout 3
                        nb_get_retry 3
                        delay_before_retry 1
                }
        }
}
===============================================
# keepalived -d &
[root@grp-01-00-50 keepalived]# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use 
Iface
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
169.254.0.0     *               255.255.0.0     U     0      0        0 eth0
default         192.168.1.1     0.0.0.0         UG    0      0        0 eth0

Here is ipvsadm -l:
[root@grp-01-00-50 keepalived]# ipvsadm -l
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  10.3.0.3:http wlc persistent 600
TCP  192.168.1.240:http rr
  -> 192.168.1.201:http           Route   1      0          1       
  -> 192.168.1.200:http           Route   1      0          0        



REAL SERVERS 1 + 2
===============================================
# /etc/sysctl.conf
# added these lines:
net.ipv4.conf.eth0.arp_ignore = 1
net.ipv4.conf.eth0.arp_announce = 2
===============================================
# /sbin/sysctl -p      # reread config


test to RIP's in browser is successful (LAN client)

So I tried access from both LAN client and Internet client and neither 
would work. 
BTW, with this DR setup can I use a LAN client to the VIP?

===============================================
logs:

Director1: /var/log/messages:
Jul 21 19:04:12 grp-01-00-50 Keepalived: Starting Keepalived v1.1.13 
(03/26,2007)
Jul 21 19:04:12 grp-01-00-50 Keepalived: Starting Healthcheck child 
process, pid=11523
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: Using MII-BMSR NIC polling 
thread...
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: Registering Kernel netlink 
reflector
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: Registering Kernel netlink 
command channel
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: Registering gratutious ARP 
shared channel
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: Configuration is using : 
34921 Bytes
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: ------< Global definitions 
 >------
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:  Router ID = 
grp-01-00-50.localdomain
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:  Smtp server = 127.0.0.1
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:  Smtp server connection 
timeout = 30
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:  Email notification from = 
root@xxxxxxxxxxxxxxxxxxxxxxxx
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp: ------< VRRP Topology >------
Jul 21 19:04:12 grp-01-00-50 Keepalived: Starting VRRP child process, 
pid=11524
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Using MII-BMSR 
NIC polling thread...
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Registering 
Kernel netlink reflector
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Registering 
Kernel netlink command channel
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Configuration is 
using : 9106 Bytes
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: ------< Global 
definitions >------
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  Router ID = 
grp-01-00-50.localdomain
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  Smtp server = 
127.0.0.1
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  Smtp server 
connection timeout = 30
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  Email 
notification from = root@xxxxxxxxxxxxxxxxxxxxxxxx
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: ------< SSL 
definitions >------
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  Using autogen 
SSL context
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: ------< LVS 
Topology >------
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  System is 
compiled with LVS v1.2.1
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  VIP = 
192.168.1.240, VPORT = 80
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    delay_loop = 
5, lb_algo = rr
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    protocol = TCP
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    lb_kind = DR
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    RIP = 
192.168.1.200, RPORT = 80, WEIGHT = 1
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:      -> Inhibit 
service on failure
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    RIP = 
192.168.1.201, RPORT = 80, WEIGHT = 1
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:      -> Inhibit 
service on failure
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: ------< Health 
checkers >------
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  192.168.1.200:80
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Keepalive 
method = TCP_CHECK
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Connection 
port = 80
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Connection 
timeout = 3
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:  192.168.1.201:80
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Keepalive 
method = TCP_CHECK
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Connection 
port = 80
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers:    Connection 
timeout = 3
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Activating 
healtchecker for service [192.168.1.200:80]
Jul 21 19:04:12 grp-01-00-50 Keepalived_healthcheckers: Activating 
healtchecker for service [192.168.1.201:80]
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:  VRRP Instance = VI_1
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Want State = MASTER
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Runing on device = eth0
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Runing LVS sync daemon 
on interface = eth0
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Virtual Router ID = 25
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Priority = 150
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Advert interval = 2sec
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Authentication type = 
SIMPLE_PASSWORD
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Password = tps
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Tracked interfaces = 1
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:      eth0 weight 0
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Virtual IP = 1
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:      192.168.1.240/24 brd 
192.168.1.240 dev eth0 scope global
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Backup state transition 
script = /etc/keepalived/ip_localhost add
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Master state transition 
script = /etc/keepalived/ip_localhost del
Jul 21 19:04:12 grp-01-00-50 Keepalived_vrrp:    Fault state transition 
script = /etc/keepalived/ip_localhost add
Jul 21 19:04:12 grp-01-00-50 kernel: IPVS: sync thread started: state = 
MASTER, mcast_ifn = eth0, syncid = 25
Jul 21 19:04:14 grp-01-00-50 Keepalived_vrrp: VRRP_Instance(VI_1) 
Transition to MASTER STATE
Jul 21 19:04:16 grp-01-00-50 Keepalived_vrrp: VRRP_Instance(VI_1) 
Entering MASTER STATE
Jul 21 19:04:16 grp-01-00-50 Keepalived_vrrp: Netlink: skipping nl_cmd 
msg...
Jul 21 19:04:16 grp-01-00-50 avahi-daemon[2084]: Registering new address 
record for 192.168.1.240 on eth0.IPv4.
Jul 21 19:08:48 grp-01-00-50 ntpd[1870]: Listening on interface #8 eth0, 
192.168.1.240#123 Enabled
Jul 21 19:10:43 grp-01-00-50 kernel: device eth0 entered promiscuous mode
Jul 21 19:11:19 grp-01-00-50 kernel: device eth0 left promiscuous mode
Jul 21 19:16:06 grp-01-00-50 kernel: device eth0 entered promiscuous mode
Jul 21 19:16:40 grp-01-00-50 kernel: device eth0 left promiscuous mode
Jul 21 20:24:30 grp-01-00-50 Keepalived_vrrp: VRRP_Instance(VI_1) 
Received lower prio advert, forcing new election


apache log:
shows no entry for clients

tcpdump (LAN client):

20:36:02.740098 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029294425 
0,nop,wscale 6>
20:36:02.740310 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029294425 
0,nop,wscale 6>
20:36:02.741291 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  53675+ PTR? 240.1.168.192.in-addr.arpa. (44)
20:36:02.742212 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:36:02.742479 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  53675+ PTR? 240.1.168.192.in-addr.arpa. (44)
20:36:02.799069 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  53675 NXDomain 0/1/0 (121)
20:36:02.799695 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  20426+ PTR? 100.2.168.192.in-addr.arpa. (44)
20:36:02.800623 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:36:02.800831 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  20426+ PTR? 100.2.168.192.in-addr.arpa. (44)
20:36:02.998456 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  20426 NXDomain 0/1/0 (121)
20:36:03.537800 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:04.272675 IP grp-01-00-50.localdomain.58251 > 192.168.1.200.http: 
S 1964955341:1964955341(0) win 5840 <mss 1460,sackOK,timestamp 161928841 
0,nop,wscale 4>
20:36:04.274000 IP 192.168.1.200.http > grp-01-00-50.localdomain.58251: 
S 2379597760:2379597760(0) ack 1964955342 win 5792 <mss 
1460,sackOK,timestamp 169392222 161928841,nop,wscale 5>
20:36:04.274134 IP grp-01-00-50.localdomain.58251 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 161928843 169392222>
20:36:04.274665 IP grp-01-00-50.localdomain.58251 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161928843 169392222>
20:36:04.275107 IP grp-01-00-50.localdomain.56327 > 192.168.1.201.http: 
S 1969398043:1969398043(0) win 5840 <mss 1460,sackOK,timestamp 161928844 
0,nop,wscale 4>
20:36:04.275787 IP 192.168.1.201.http > grp-01-00-50.localdomain.56327: 
S 2214454959:2214454959(0) ack 1969398044 win 5792 <mss 
1460,sackOK,timestamp 166387012 161928844,nop,wscale 5>
20:36:04.275880 IP grp-01-00-50.localdomain.56327 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 161928844 166387012>
20:36:04.278212 IP grp-01-00-50.localdomain.56327 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161928847 166387012>
20:36:04.805689 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:05.382616 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:05.538287 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:05.738733 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029297425 
0,nop,wscale 6>
20:36:05.738794 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029297425 
0,nop,wscale 6>
20:36:05.805512 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:06.382425 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:06.805267 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:07.382336 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:07.539849 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:07.736260 arp who-has 192.168.1.240 tell 192.168.1.2
20:36:07.736293 arp reply 192.168.1.240 is-at 00:0c:29:a7:c7:33 (oui 
Unknown)
20:36:07.737153 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  27532+ PTR? 2.1.168.192.in-addr.arpa. (42)
20:36:07.738112 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 78
20:36:07.738351 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  27532+ PTR? 2.1.168.192.in-addr.arpa. (42)
20:36:07.795395 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  27532 NXDomain 0/1/0 (119)
20:36:09.275546 IP grp-01-00-50.localdomain.58253 > 192.168.1.200.http: 
S 1962021587:1962021587(0) win 5840 <mss 1460,sackOK,timestamp 161933844 
0,nop,wscale 4>
20:36:09.276806 IP 192.168.1.200.http > grp-01-00-50.localdomain.58253: 
S 2390901810:2390901810(0) ack 1962021588 win 5792 <mss 
1460,sackOK,timestamp 169397225 161933844,nop,wscale 5>
20:36:09.276976 IP grp-01-00-50.localdomain.58253 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 161933845 169397225>
20:36:09.277044 arp who-has grp-01-00-50.localdomain tell 192.168.1.2
20:36:09.277056 arp reply grp-01-00-50.localdomain is-at 
00:0c:29:a7:c7:33 (oui Unknown)
20:36:09.278492 IP grp-01-00-50.localdomain.58253 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161933847 169397225>
20:36:09.280017 IP grp-01-00-50.localdomain.56329 > 192.168.1.201.http: 
S 1966647285:1966647285(0) win 5840 <mss 1460,sackOK,timestamp 161933849 
0,nop,wscale 4>
20:36:09.280560 IP 192.168.1.201.http > grp-01-00-50.localdomain.56329: 
S 2218395260:2218395260(0) ack 1966647286 win 5792 <mss 
1460,sackOK,timestamp 166392018 161933849,nop,wscale 5>
20:36:09.280633 IP grp-01-00-50.localdomain.56329 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 161933849 166392018>
20:36:09.281062 IP grp-01-00-50.localdomain.56329 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161933850 166392018>
20:36:09.540522 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:09.807594 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:10.384729 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:10.807346 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:11.384454 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:11.542014 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:11.737837 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029303425 
0,nop,wscale 6>
20:36:11.737900 IP 192.168.2.100.39335 > 192.168.1.240.http: S 
3213854235:3213854235(0) win 5840 <mss 1460,sackOK,timestamp 1029303425 
0,nop,wscale 6>
20:36:11.807120 arp who-has 192.168.1.40 tell 192.168.1.46
20:36:12.384340 arp who-has 192.168.1.40 tell 192.168.1.45
20:36:12.738611 arp who-has 192.168.1.1 tell grp-01-00-50.localdomain
20:36:12.738923 arp reply 192.168.1.1 is-at 00:18:f8:48:27:15 (oui Unknown)
20:36:13.542566 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:36:14.279445 IP grp-01-00-50.localdomain.58255 > 192.168.1.200.http: 
S 1971652598:1971652598(0) win 5840 <mss 1460,sackOK,timestamp 161938848 
0,nop,wscale 4>
20:36:14.280641 IP 192.168.1.200.http > grp-01-00-50.localdomain.58255: 
S 2382478595:2382478595(0) ack 1971652599 win 5792 <mss 
1460,sackOK,timestamp 169402229 161938848,nop,wscale 5>
20:36:14.280760 IP grp-01-00-50.localdomain.58255 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 161938849 169402229>
20:36:14.281369 IP grp-01-00-50.localdomain.58255 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161938850 169402229>
20:36:14.281676 IP grp-01-00-50.localdomain.56331 > 192.168.1.201.http: 
S 1969086688:1969086688(0) win 5840 <mss 1460,sackOK,timestamp 161938850 
0,nop,wscale 4>
20:36:14.282317 IP 192.168.1.201.http > grp-01-00-50.localdomain.56331: 
S 2221511026:2221511026(0) ack 1969086689 win 5792 <mss 
1460,sackOK,timestamp 166397022 161938850,nop,wscale 5>
20:36:14.282407 IP grp-01-00-50.localdomain.56331 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 161938851 166397022>
20:36:14.283270 IP grp-01-00-50.localdomain.56331 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 161938852 166397022>
575 packets captured
575 packets received by filter
0 packets dropped by kernel



tcpdump (Internet client):

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
20:52:36.148237 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  32616+ PTR? 102.2.168.192.in-addr.arpa. (44)
20:52:36.149819 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:52:36.150404 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  32616+ PTR? 102.2.168.192.in-addr.arpa. (44)
20:52:36.207652 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  32616 NXDomain 0/1/0 (121)
20:52:36.209060 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  56499+ PTR? 11.2.168.192.in-addr.arpa. (43)
20:52:36.209349 IP 192.168.1.1 > grp-01-00-50.localdomain: ICMP redirect 
192.168.2.11 to host 192.168.1.2, length 79
20:52:36.210099 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 79
20:52:36.210297 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  56499+ PTR? 11.2.168.192.in-addr.arpa. (43)
20:52:36.267316 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  56499 NXDomain 0/1/0 (120)
20:52:36.268328 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  27084+ PTR? 253.64.124.206.in-addr.arpa. (45)
20:52:36.269244 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 81
20:52:36.269450 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  27084+ PTR? 253.64.124.206.in-addr.arpa. (45)
20:52:36.326167 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  27084 1/2/2 (148)
20:52:36.327204 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  37621+ PTR? 1.1.168.192.in-addr.arpa. (42)
20:52:36.328156 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 78
20:52:36.328603 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  37621+ PTR? 1.1.168.192.in-addr.arpa. (42)
20:52:36.348862 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:36.385536 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  37621 NXDomain 0/1/0 (119)
20:52:36.389852 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  26575+ PTR? 2.1.168.192.in-addr.arpa. (42)
20:52:36.390812 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 78
20:52:36.391082 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  26575+ PTR? 2.1.168.192.in-addr.arpa. (42)
20:52:36.447838 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  26575 NXDomain 0/1/0 (119)
20:52:36.449084 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  35908+ PTR? 40.1.168.192.in-addr.arpa. (43)
20:52:36.450041 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 79
20:52:36.450303 IP grp-01-00-50.localdomain.32782 > 
oingo.gte.net.domain:  35908+ PTR? 40.1.168.192.in-addr.arpa. (43)
20:52:36.507211 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32782:  35908 NXDomain 0/1/0 (120)
20:52:36.508052 IP grp-01-00-50.localdomain.32782 > 
192.168.2.11.domain:  18427+ PTR? 46.1.168.192.in-addr.arpa. (43)
20:52:36.929191 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:37.348695 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:37.928953 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:38.093402 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:38.490474 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425823915 0,nop,wscale 1,nop,nop,sackOK>
20:52:38.490575 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425823915 0,nop,wscale 1,nop,nop,sackOK>
20:52:39.292276 arp who-has grp-01-00-50.localdomain tell 192.168.1.2
20:52:39.292304 arp reply grp-01-00-50.localdomain is-at 
00:0c:29:a7:c7:33 (oui Unknown)
20:52:39.792075 IP grp-01-00-50.localdomain.48017 > 192.168.1.200.http: 
S 3023530702:3023530702(0) win 5840 <mss 1460,sackOK,timestamp 162924361 
0,nop,wscale 4>
20:52:39.793197 IP 192.168.1.200.http > grp-01-00-50.localdomain.48017: 
S 3430849824:3430849824(0) ack 3023530703 win 5792 <mss 
1460,sackOK,timestamp 170387750 162924361,nop,wscale 5>
20:52:39.793304 IP grp-01-00-50.localdomain.48017 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 162924362 170387750>
20:52:39.793589 IP grp-01-00-50.localdomain.48017 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162924362 170387750>
20:52:39.793858 IP grp-01-00-50.localdomain.57927 > 192.168.1.201.http: 
S 3022202772:3022202772(0) win 5840 <mss 1460,sackOK,timestamp 162924362 
0,nop,wscale 4>
20:52:39.795487 IP 192.168.1.201.http > grp-01-00-50.localdomain.57927: 
S 3265727308:3265727308(0) ack 3022202773 win 5792 <mss 
1460,sackOK,timestamp 167382908 162924362,nop,wscale 5>
20:52:39.795598 IP grp-01-00-50.localdomain.57927 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 162924364 167382908>
20:52:39.796061 IP grp-01-00-50.localdomain.57927 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162924365 167382908>
20:52:40.095078 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:40.352990 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:40.932429 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:41.352732 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:41.508771 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  18427+ PTR? 46.1.168.192.in-addr.arpa. (43)
20:52:41.566218 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  18427 NXDomain 0/1/0 (120)
20:52:41.567889 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  8334+ PTR? 45.1.168.192.in-addr.arpa. (43)
20:52:41.569026 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 79
20:52:41.569666 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  8334+ PTR? 45.1.168.192.in-addr.arpa. (43)
20:52:41.626295 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  8334 NXDomain 0/1/0 (120)
20:52:41.627084 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  3054+ PTR? 18.0.0.224.in-addr.arpa. (41)
20:52:41.627988 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 77
20:52:41.628186 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  3054+ PTR? 18.0.0.224.in-addr.arpa. (41)
20:52:41.685426 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  3054 1/3/5 PTR[|domain]
20:52:41.686253 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  3174+ PTR? 240.1.168.192.in-addr.arpa. (44)
20:52:41.687184 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:52:41.687403 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  3174+ PTR? 240.1.168.192.in-addr.arpa. (44)
20:52:41.744262 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  3174 NXDomain 0/1/0 (121)
20:52:41.745122 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  49070+ PTR? 239.236.11.70.in-addr.arpa. (44)
20:52:41.746015 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:52:41.746198 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  49070+ PTR? 239.236.11.70.in-addr.arpa. (44)
20:52:41.863093 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425824252 0,nop,wscale 1,nop,nop,sackOK>
20:52:41.863151 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425824252 0,nop,wscale 1,nop,nop,sackOK>
20:52:41.932237 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:42.025467 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  49070 1/2/0 (133)
20:52:42.026560 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  49759+ PTR? 200.1.168.192.in-addr.arpa. (44)
20:52:42.029336 IP 192.168.2.11 > grp-01-00-50.localdomain: ICMP 
192.168.2.11 udp port domain unreachable, length 80
20:52:42.029653 IP grp-01-00-50.localdomain.32783 > 
oingo.gte.net.domain:  49759+ PTR? 200.1.168.192.in-addr.arpa. (44)
20:52:42.086752 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32783:  49759 NXDomain 0/1/0 (121)
20:52:42.087963 IP grp-01-00-50.localdomain.32783 > 
192.168.2.11.domain:  61081+ PTR? 201.1.168.192.in-addr.arpa. (44)
20:52:42.095619 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:42.352902 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:42.932016 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:44.097334 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:44.794037 IP grp-01-00-50.localdomain.48019 > 192.168.1.200.http: 
S 3032325921:3032325921(0) win 5840 <mss 1460,sackOK,timestamp 162929363 
0,nop,wscale 4>
20:52:44.795097 IP 192.168.1.200.http > grp-01-00-50.localdomain.48019: 
S 3435820613:3435820613(0) ack 3032325922 win 5792 <mss 
1460,sackOK,timestamp 170392752 162929363,nop,wscale 5>
20:52:44.795207 IP grp-01-00-50.localdomain.48019 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 162929364 170392752>
20:52:44.795513 IP grp-01-00-50.localdomain.48019 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162929364 170392752>
20:52:44.797311 IP grp-01-00-50.localdomain.57929 > 192.168.1.201.http: 
S 3024136287:3024136287(0) win 5840 <mss 1460,sackOK,timestamp 162929366 
0,nop,wscale 4>
20:52:44.797868 IP 192.168.1.201.http > grp-01-00-50.localdomain.57929: 
S 3267839511:3267839511(0) ack 3024136288 win 5792 <mss 
1460,sackOK,timestamp 167387914 162929366,nop,wscale 5>
20:52:44.797965 IP grp-01-00-50.localdomain.57929 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 162929367 167387914>
20:52:44.798197 IP grp-01-00-50.localdomain.57929 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162929367 167387914>
20:52:45.356813 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:45.934444 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:46.098696 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:46.356607 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:46.563567 arp who-has grp-01-00-50.localdomain tell 192.168.1.1
20:52:46.563593 arp reply grp-01-00-50.localdomain is-at 
00:0c:29:a7:c7:33 (oui Unknown)
20:52:46.934271 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:47.088597 IP grp-01-00-50.localdomain.32784 > 
oingo.gte.net.domain:  61081+ PTR? 201.1.168.192.in-addr.arpa. (44)
20:52:47.145857 IP oingo.gte.net.domain > 
grp-01-00-50.localdomain.32784:  61081 NXDomain 0/1/0 (121)
20:52:47.356490 arp who-has 192.168.1.40 tell 192.168.1.46
20:52:47.934047 arp who-has 192.168.1.40 tell 192.168.1.45
20:52:48.099608 IP grp-01-00-50.localdomain > VRRP.MCAST.NET: VRRPv2, 
Advertisement, vrid 25, prio 150, authtype simple, intvl 2s, length 20
20:52:48.609908 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425824927 0,nop,wscale 1,nop,nop,sackOK>
20:52:48.610049 IP h460becef.area7.spcsdns.net.37263 > 
192.168.1.240.http: S 2586539050:2586539050(0) win 33580 <mss 
1460,nop,nop,timestamp 425824927 0,nop,wscale 1,nop,nop,sackOK>
20:52:49.796967 IP grp-01-00-50.localdomain.48021 > 192.168.1.200.http: 
S 3033712118:3033712118(0) win 5840 <mss 1460,sackOK,timestamp 162934366 
0,nop,wscale 4>
20:52:49.798315 IP 192.168.1.200.http > grp-01-00-50.localdomain.48021: 
S 3436105264:3436105264(0) ack 3033712119 win 5792 <mss 
1460,sackOK,timestamp 170397755 162934366,nop,wscale 5>
20:52:49.798435 IP grp-01-00-50.localdomain.48021 > 192.168.1.200.http: 
. ack 1 win 365 <nop,nop,timestamp 162934367 170397755>
20:52:49.799921 IP grp-01-00-50.localdomain.48021 > 192.168.1.200.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162934368 170397755>
20:52:49.800274 IP grp-01-00-50.localdomain.57931 > 192.168.1.201.http: 
S 3026929021:3026929021(0) win 5840 <mss 1460,sackOK,timestamp 162934369 
0,nop,wscale 4>
20:52:49.800786 IP 192.168.1.201.http > grp-01-00-50.localdomain.57931: 
S 3274659937:3274659937(0) ack 3026929022 win 5792 <mss 
1460,sackOK,timestamp 167392918 162934369,nop,wscale 5>
20:52:49.800861 IP grp-01-00-50.localdomain.57931 > 192.168.1.201.http: 
. ack 1 win 365 <nop,nop,timestamp 162934369 167392918>
20:52:49.801260 IP grp-01-00-50.localdomain.57931 > 192.168.1.201.http: 
R 1:1(0) ack 1 win 365 <nop,nop,timestamp 162934370 167392918>





<Prev in Thread] Current Thread [Next in Thread>