Re: [SQU] Strange WCCP and truncated GRE packet problem. (cont)

From: Nathan Lewis <[email protected]>
Date: Tue, 12 Dec 2000 18:20:28 -0600

On the new machine I configured, it isn't 1good, 1 bad anymore. Just
(mostly) a stream of "bad" ones. Here's an output of one of them:

18:13:06.647379 eth0 < truncated-ip - 24 bytes missing!gre-proto-0x883E
(gre encap)
                          4500 04be 0002 0000 ff2f 6ae0 d0d4 5541
                          d0d4 5544 0000 883e 4500 04a6 6460 4000
                          7e06 ee32 d0d4 5542 cf2e b079 0f09 0050
                          0022 6ea3 69bb ee0f 5018 2238 f6d8 0000
                          4745 5420 2f20 4854 5450 2f31 2e31 0d0a
                          4163 6365 7074 3a20 6170 706c 6963 6174
                          696f 6e2f 766e 642e 6d73 2d70 6f77 6572
                          706f 696e 742c 2061 7070 6c69 6361 7469
                          6f6e 2f76 6e64 2e6d 732d 6578 6365 6c2c
18:13:14.258141 eth0 < truncated-ip - 24 bytes missing!gre-proto-0x883E
(gre encap)
                          4500 04be 0003 0000 ff2f 6adf d0d4 5541
                          d0d4 5544 0000 883e 4500 04a6 6660 4000
                          7e06 ec32 d0d4 5542 cf2e b079 0f09 0050
                          0022 6ea3 69bb ee0f 5018 2238 f6d8 0000
                          4745 5420 2f20 4854 5450 2f31 2e31 0d0a
                          4163 6365 7074 3a20 6170 706c 6963 6174
                          696f 6e2f 766e 642e 6d73 2d70 6f77 6572
                          706f 696e 742c 2061 7070 6c69 6361 7469
                          6f6e 2f76 6e64 2e6d 732d 6578 6365 6c2c

Doesn't mean much to me.....

>Interesting. I've never seen tcpdump complain like that.
>
>Could be a cisco bug I suppose.
>
>Maybe run tcpdump -x -n ip proto 47 and look at the packets
>you're receiving.

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Tue Dec 12 2000 - 17:19:51 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:56:56 MST