odd routing issue

Elixer

Lifer
May 7, 2002
10,376
762
126
In windows:
Code:
Pinging 192.168.1.32 with 32 bytes of data:
Reply from 192.168.1.39: Destination host unreachable.
Reply from 192.168.1.39: Destination host unreachable.
Reply from 192.168.1.39: Destination host unreachable.
Reply from 192.168.1.39: Destination host unreachable.
In linux:
Code:
ping 192.168.1.32
PING 192.168.1.32 (192.168.1.32) 56(84) bytes of data.
From 192.168.1.17 icmp_seq=1 Destination Host Unreachable
From 192.168.1.17 icmp_seq=2 Destination Host Unreachable
From 192.168.1.17 icmp_seq=3 Destination Host Unreachable
From 192.168.1.17 icmp_seq=4 Destination Host Unreachable
From 192.168.1.17 icmp_seq=8 Destination Host Unreachable
From 192.168.1.17 icmp_seq=9 Destination Host Unreachable
...
And finally, from router:
Code:
0	192.168.1.32 (192.168.1.32)	64	64	93.18	
1	192.168.1.32 (192.168.1.32)	64	64	67.33	-25.86
2	192.168.1.32 (192.168.1.32)	64	64	77.28	9.95
3	192.168.1.32 (192.168.1.32)	64	64	97.24	19.96
...
Round-Trip: 67.325 min, 88.587 avg, 107.915 max (ms)
   Packets: 5 transmitted, 5 received, 0% lost

Now, the question is why does pinging 192.168.1.32 from linux or windows jump to a IP that isn't 192.168.1.32?
There are no FW rules enabled.
There are no IPTABLES rules to account for what is going on.

192.168.1.32 is a android device hooked up via WiFi.

So, anyone got any ideas?

*edit, looks like 192.168.1.32 isn't showing up in ARP for some reason.
*edit 2. Issue resolved itself.
No idea how, I just went away for a bite to eat, came back, and it was working as it should.

windows:
Code:
Pinging 192.168.1.32 with 32 bytes of data:
Reply from 192.168.1.32: bytes=32 time=35ms TTL=64
Reply from 192.168.1.32: bytes=32 time=95ms TTL=64
Reply from 192.168.1.32: bytes=32 time=318ms TTL=64
Reply from 192.168.1.32: bytes=32 time=230ms TTL=64
linux:
Code:
PING 192.168.1.32 (192.168.1.32) 56(84) bytes of data.
64 bytes from 192.168.1.32: icmp_seq=1 ttl=64 time=240 ms
64 bytes from 192.168.1.32: icmp_seq=2 ttl=64 time=135 ms
64 bytes from 192.168.1.32: icmp_seq=3 ttl=64 time=363 ms
64 bytes from 192.168.1.32: icmp_seq=4 ttl=64 time=282 ms
64 bytes from 192.168.1.32: icmp_seq=5 ttl=64 time=1.44 ms
64 bytes from 192.168.1.32: icmp_seq=6 ttl=64 time=101 ms
64 bytes from 192.168.1.32: icmp_seq=7 ttl=64 time=328 ms
64 bytes from 192.168.1.32: icmp_seq=8 ttl=64 time=247 ms
And yes, it is showing up in ARP now.
 
Last edited:

w0ss

Senior member
Sep 4, 2003
365
0
0
I am guessing those IP's are from the machines you are pinging from. If it can't arp and get a mac address it will show like that.

Perhaps the mobile device shutoff it's wifi since it was in sleep mode.
 

azazel1024

Senior member
Jan 6, 2014
901
2
76
Probably the mobile device wifi chipset was in a sleep state. Packet coalesscing resulted in a simple ARP request not being returned, so that the linux and windows machines couldn't see it. When the device was awake at some point and ARP requests were going out, both machines finally saw the android device and thus had it listed in their ARP tables.

That is my guess. AFAIK, when you have packet coalesscing on, one of the things the wifi adapter will not do is respond to ARP/broadcasts of any sort and only reply to specificly targeted packets when in a lower power state.
 

Railgun

Golden Member
Mar 27, 2010
1,289
2
81
A router/switch is returning a device unreachable icmp message!
In this case, no it's not. That IP isn't (wasn't) in your device's ARP cache. They don't know how to get to it...therefore they're the ones replying.

If you were pinging to something outside of your subnet that wasn't reachable, then your router would reply.
 
sale-70-410-exam    | Exam-200-125-pdf    | we-sale-70-410-exam    | hot-sale-70-410-exam    | Latest-exam-700-603-Dumps    | Dumps-98-363-exams-date    | Certs-200-125-date    | Dumps-300-075-exams-date    | hot-sale-book-C8010-726-book    | Hot-Sale-200-310-Exam    | Exam-Description-200-310-dumps?    | hot-sale-book-200-125-book    | Latest-Updated-300-209-Exam    | Dumps-210-260-exams-date    | Download-200-125-Exam-PDF    | Exam-Description-300-101-dumps    | Certs-300-101-date    | Hot-Sale-300-075-Exam    | Latest-exam-200-125-Dumps    | Exam-Description-200-125-dumps    | Latest-Updated-300-075-Exam    | hot-sale-book-210-260-book    | Dumps-200-901-exams-date    | Certs-200-901-date    | Latest-exam-1Z0-062-Dumps    | Hot-Sale-1Z0-062-Exam    | Certs-CSSLP-date    | 100%-Pass-70-383-Exams    | Latest-JN0-360-real-exam-questions    | 100%-Pass-4A0-100-Real-Exam-Questions    | Dumps-300-135-exams-date    | Passed-200-105-Tech-Exams    | Latest-Updated-200-310-Exam    | Download-300-070-Exam-PDF    | Hot-Sale-JN0-360-Exam    | 100%-Pass-JN0-360-Exams    | 100%-Pass-JN0-360-Real-Exam-Questions    | Dumps-JN0-360-exams-date    | Exam-Description-1Z0-876-dumps    | Latest-exam-1Z0-876-Dumps    | Dumps-HPE0-Y53-exams-date    | 2017-Latest-HPE0-Y53-Exam    | 100%-Pass-HPE0-Y53-Real-Exam-Questions    | Pass-4A0-100-Exam    | Latest-4A0-100-Questions    | Dumps-98-365-exams-date    | 2017-Latest-98-365-Exam    | 100%-Pass-VCS-254-Exams    | 2017-Latest-VCS-273-Exam    | Dumps-200-355-exams-date    | 2017-Latest-300-320-Exam    | Pass-300-101-Exam    | 100%-Pass-300-115-Exams    |
http://www.portvapes.co.uk/    | http://www.portvapes.co.uk/    |