🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: uk.comp.os.linux
Article #110

Re: ppp hanging due to irritating Korean school kids

#110
From: Nick Drage
Date: Sun, 29 Apr 2001 00:31
63 lines
3622 bytes
On 28 Apr 2001 12:46:29 +0100, Tim Haynes
<piglet@stirfried.vegetable.org.uk> wrote:

>nickd@nospam.demon.co.uk (Nick Drage) writes:
<snip>

>> >Nothing normally does. What you don't say is how much activity there is
>> >after it's `hung'. You also don't say whether you're getting any
>> >malformed packets, fragmentation problems, or what.
>> 
>> Yes, first time I've heard anyone complain about this - what do your
>> PPP logs say ( /var/log/debug ? )
>
>I'm thinking it would also be a good idea to run pppd in maximum debug mode
>- `kdebug 25' (or 81?) and get the contents of every packet. I wonder if
>the modem is so misconfigured as to be mishandling an `ATH' coming down?

Yikes, that's very misconfigured isn't it ;)  From what I've heard
about this problem I think it's due to the modem firmware not dealing
with ATH properly, rather than being a configuration issue.  Don't
know a great deal about this though, so willing to be educated.

<snip>

>> "iptraf" ?
>
>Nope, just iptraf will do nicely. <http://rpmfind.net/> is your fwend(TM).

Bah, rpms?  Google is my friend:
http://cebu.mozcom.com/riker/iptraf/

>> >Consider what would happen if your box was port-scanning a large (/16)
>> >network block over your modem and then you bounced ppp0; I'd expect an
>> >overclogged connection that would appear like it's hung, and then maybe
>> >the process/es responsible would die after the interface was downed.
>> 
>> Er... this connections were all inbound weren't they? What logical step
>> did I miss?
>
>If you've been cracked, thre's a large chance you're scanning /16 blocks of
>network at random for similar things - 1i0n and ramen (and adore?) all do
>this. If you're getting a largre amount of packets and you suddenly become
>`destination-unreachable', might not the process also go away if it's
>remote?

Good point, but I'm not sure a great deal of destination unreachables
should tear down a PPP connection?  As the ICMP will be over IP, which
is over PPP, so PPP has no "knowledge", for want of a better word, of
what an ICMP packet is.

>> >In short, you're home but not even vigorously towelling off yet.
>> 
>> Now there's a phrase to remember :)
>
>Based on an orignial by D Adams :8)

Heh, I've got a downloaded copy of The Book of Liff somewhere ( and
the original in the parents' attic I think ), must re-read sooner
rather than later :)

-- 
"Analogies generally suck."
David Taylor
Technical Details
Message-ID: <3aeb5fad.49203270@news.demon.co.uk>
Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news.tele.dk!212.74.64.35!colt.net!dispose.news.demon.net!news.demon.co.uk!demon!metastasis.demon.co.uk!not-for-mail
References: <3AE6D9DD.C739A284@wretched.demon.co.uk> <87k8492h4q.fsf@storm.emcuk.com> <3ae9c8a6.2152815@news.demon.co.uk> <87n191xn56.fsf@storm.emcuk.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 108f6a,4403abd1862fb11f
X-Google-Attributes: gid108f6a,public
X-Google-Thread: 10d8ad,4403abd1862fb11f
X-Google-Attributes: gid10d8ad,public
X-Google-ArrivalTime: 2001-04-28 17:32:01 PST
Path: arc1-ca.pugleaf.net!newsfeed.google.com!newsfeed.stanford.edu!news.tele.dk!212.74.64.35!colt.net!dispose.news.demon.net!news.demon.co.uk!demon!metastasis.demon.co.uk!not-for-mail
From: nickd@nospam.demon.co.uk (Nick Drage)
Newsgroups: uk.comp.os.linux,demon.ip.support.unix
Subject: Re: ppp hanging due to irritating Korean school kids
Date: Sun, 29 Apr 2001 00:31:43 GMT
Message-ID: <3aeb5fad.49203270@news.demon.co.uk>
References: <3AE6D9DD.C739A284@wretched.demon.co.uk> <87k8492h4q.fsf@storm.emcuk.com> <3ae9c8a6.2152815@news.demon.co.uk> <87n191xn56.fsf@storm.emcuk.com>
Reply-To: nick-drage@gmx.co.uk
NNTP-Posting-Host: metastasis.demon.co.uk
X-NNTP-Posting-Host: metastasis.demon.co.uk:194.222.175.29
X-Trace: news.demon.co.uk 988504305 nnrp-13:19725 NO-IDENT metastasis.demon.co.uk:194.222.175.29
X-Complaints-To: abuse@demon.net
X-Newsreader: Forte Free Agent 1.21/32.243
Lines: 63