Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Router broken or is my Linux crazy? *Smallest* log include

From: "Monkey D. Luffy" <the.real.monkey.d.luffy@xxxxxxxxx>
Date: Mon, 10 Mar 2008 11:26:56 +0000
> Your computer should gather that 192.168.2.1 is your router's ethernet
> from the broadcasts it listens to. Thats also a way of learning ARP tables.
So that means that I have (at least) a problem in my computer? Since
it doesn't learn who the router is from the IGMPs packets:

     86 1403.785840 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     87 1404.785886 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     88 1407.786026 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     89 1408.332413 192.168.2.1           224.0.0.1             IGMP
  V2 Membership Query
     90 1408.586063 192.168.2.100         224.0.0.251           IGMP
  V2 Membership Report
     91 1408.786070 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     92 1409.786118 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     93 1412.493245 192.168.2.1           224.0.0.9             IGMP
  V2 Membership Report
     94 1412.786256 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     95 1413.786301 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     96 1414.786348 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100
     97 1416.138415 192.168.2.100         239.255.67.250        IGMP
  V2 Membership Report
     98 1417.786490 AsustekC_ba:f5:a8     Broadcast             ARP
  Who has 192.168.2.1?  Tell 192.168.2.100



Can there something be wrong with the mask used?

> However its odd that the router doesnt answer a specific ARP request
> targeted to him.
So that means my router is indeed brain dead.

> Now to the tricky questions. Where did you capture this?
I captured it on my computer, 192.168.10.100

> Maybe the router answered but your computer didnt get the answer
> because the switch in the middle is messed up or so?
The cable modem connects to my router. From my router 2 RJ45 cables
connect to 2 computers. Both (Linux) computers fail network connection
at the same time.
I don't use any switch hardware device.

I have to say that when my NIC connects directly to the cable modem
(no router in the middle) I don't have any problems with my network
connection.


Thanks for your feedback.