I have submitted a PMR on this. I will post the progress/outcome. Any others
out there seeing this?
Scott Bursik
PepsiCo Business Solutions Group
Enterprise Systems Management
-----Original Message-----
From: Barr, Scott [mailto:Scott_Barr@csgsystems.com]
Sent: Wednesday, December 10, 2003 2:06 PM
To: nv-l@lists.us.ibm.com
Subject: RE: [nv-l] NetView Multicast
To the best of my knowledge you should NEVER see a multi-cast on port 161.
This definately sounds like a bug. If it is, it would explain a problem I
have been working on where my content switches sqwauk about authentication
failures but I Never see a bad packet go out. I havent' been monitoring
broadcast subnet but I will. Results soon.
-----Original Message-----
From: owner-nv-l@lists.us.ibm.com [mailto:owner-nv-l@lists.us.ibm.com]On
Behalf Of Bursik, Scott {PBSG}
Sent: Wednesday, December 10, 2003 1:57 PM
To: Nv-L (nv-l@lists.us.ibm.com)
Subject: [nv-l] NetView Multicast
In an effort to troubleshoot Authentication Trap Failure errors I have
started sniffing one of the machines that is sending these events. I noticed
a LOT of traps coming in at one time on my NetView box from that machine and
the below sample is the cause of the Auth. Failure traps. I searched the
archives and see one thread talking about this condition but there was no
resolution and the address showing in packet is the same as that thread.
Here is the thread I read:
http://lists.skills-1st.co.uk/mharc/html/nv-l/1999-08/msg00259.html
Any ideas?
====( 183 bytes received on interface en0 )==== 12:50:21.634682865
ETHERNET packet : [ 00:02:55:76:27:d6 -> 01:00:5e:00:00:01 ] type 800 (IP)
IP header breakdown:
< SRC = 156.81.227.16 > (pbsxsn00001.fritolay.pvt)
< DST = 224.0.0.1 > (ALL-SYSTEMS.MCAST.NET)
ip_v=4, ip_hl=20, ip_tos=0, ip_len=169, ip_id=24043, ip_off=0
ip_ttl=1, ip_sum=fbf5, ip_p = 17 (UDP)
UDP header breakdown:
<source port=39803, <destination port=161(snmp) >
[ udp length = 149 | udp checksum = 4612 ]
00000000 30818a02 01000406 7075626c 6963a17d |0.......public.}|
00000010 020373a7 38020100 02010030 70300e06 |..s.8......0p0..|
00000020 0a2b0601 02010202 01010105 00300e06 |.+...........0..|
00000030 0a2b0601 02010202 01060105 00300e06 |.+...........0..|
00000040 0a2b0601 02010202 01030105 00300e06 |.+...........0..|
00000050 0a2b0601 02010202 01020105 00300e06 |.+...........0..|
00000060 0a2b0601 02010202 01070105 00300e06 |.+...........0..|
00000070 0a2b0601 02010202 01080105 00300e06 |.+...........0..|
00000080 0a2b0601 02010202 01050105 00 |.+........... |
Thanks,
Scott Bursik
PepsiCo
|