OGalati
join:2005-08-19
Argentina
|  Trace packet on P660-HW-T1v2
Hi all.
I'm dealing with a P660-HW-T1v2, trying to debug some traffic.
I'm using the old packet trace feature and having some troubles.
I can't see almost any outgoing traffic from the router over the Ethernet channel.
There is an attachment with some captures where we can see the only traffic leaving the router is that having the router itself as source, ie. my own Telnet session (port 23232), ProxyDNS responses, ARP responses, and some broadcasts sent to the ENET1 channel. The logs are some extensive because of Telnet traffic, sorry.
Firewall is off and all filtering is off. The logs of all the incoming traffic from the subnet to the router is OK but turned off for capturing purposes.
I'd need to know why I can't see the logs of the main traffic sent from the router to the ENET0 channel. The traffic sent to the ENET1 channel is not important right now, but I left it there BTW if it have some meaning to the trouble. Anyway I don't understand what the meaning of ENET1 channel is in this device, since its an ADSL modem with only one Ethernet channel, AFAIK.
Thank you very much for your time. Any insight will be appreciated.
Best regards.
OG |
|
dslpartner
join:2005-02-18 | Try to turn on both ways and see if that changes anything |
|
OGalati
join:2005-08-19
Argentina
1 edit |
Thanks, dslpartner, for reply.
I activated the logging of all traffic of ENET0 channel, as you suggested. It doesn't seem have changed the logging.
I'm logged in the device from the wan interface, to avoid the Telnet traffic on Ethernet; that's why there isn't my own Telnet session traffic in the logs.
I'm attaching a file with on line capture with some traffic. Very few outgoing traffic logging, mostly Proxy-DNS replays, and retransmitted broadcasts over the ENET1 channel ¿?
There is another attachment with captures from buffer, just to parse some packets.
I parsed packets 11-13 where I can see a duplicate 11-12 log of a NetBIOS broadcast (I don't understand the duplication). Packet 13 seems to be a spreading of same packet over the ENET 1 channel.
I parsed packets 53-54, that seem to be DNS request/reply.
I can't see any other logging of outgoing traffic.
Thanks, again.
Edit: BTW, there is another subnet (192.200.100.x) attached throw what I'm telnetting the modem's WAN side. |
|
OGalati
join:2005-08-19
Argentina
| reply to OGalati
I found another class of packet that is being logged:
Packet 4 is a TCP-SYN packet generated in Internet matching a port forwarding rule. Most of normal traffic sent to LAN is not traced. |
|
dslpartner
join:2005-02-18
| reply to OGalati
Problem is that this feature is not made for usage by all, its an engineer feature to do debugging, so if its buggy its not much we can do about it.
Contact ZyXEL and ask them about it, I have not used this feature since the ISDN and Prestige 300 series and then it worked fine.
Have you tried to just fill the buffer and capture both ways and telnet from lan or even console connection?
Cant be of more help sorry.
--
"Perl is executable line noise, Python is executable pseudo-code."
|
|
OGalati
join:2005-08-19
Argentina
| I tried all you suggest except console. May be it's buggy.
I thought I was doing a wrong setup because it's an old and mature feature that doesn't seem to have changed along the time, but I only used it a few times in other devices.
Thank you very much.
Best regards |
|
