Re: [Xen-users] Cannot ping DomU from Dom0 / cannot ping same site from two DomUs at the same time

[Wolfgang Formann <wformann@xxxxxxxx>]

Fajar A. Nugraha wrote:
> On Tue, Jun 9, 2009 at 3:27 PM, Wolfgang Formann<wformann@xxxxxxxx> wrote:
> 
>>Now when I do a ping from Dom0 to DomU I see the following tcpdump:
>>09:45:43.191701 arp who-has 192.168.222.102 tell 192.168.222.16
>>and no answer within a few seconds.
>>
>>So it seems that something with arp is not fine. Any ideas what to do next?
> 
> 
> Dump Suse?
> 
> Kidding :)

:-)

> If it were ARP issue your domU would be completely disconnected from
> network. Since you say you can ping other host from domU, that's
> probably not it. I'd check domU's firewall first, most likely its
> blocking things (including ICMP echo). Disable it first for
> troubleshooting purposes.

Argh! I forgot that "fine" Windows firewall.

Ping from one DomU to the other works now fine.
Ping from any host in my LAN to DomU works fine too.

Shame on me, many thanks to you.

>>The other problem which may be related is a little bit more strange. I have 
>>set
>>up two DomU's, one with Vista-32bit and one with Vista-64bit. Both have
>>differend IP-addresses and different MAC-addresses. I can ping whatever host 
>>(in
>>my LAN or in the internet) with both DomU's. No problem. I can also ping any
>>host, even on a different subnet in my LAN from both DomU's at the same time.
>>
>>But when I try to ping www.suse.com (or any other host in the internet) at the
>>same time only that DomU pings successfully where I started the ping first, 
>>the
>>other DomU fails. If one DomU pings www.slashdot.org an other other pings
>>www.suse.com both pings work fine. Ping also works fine, when I ping any other
>>host in my LAN from both DomU's. This one puzzles mee too. I crosschecked and
>>can ping from any other pair of my machines to the outside without problems.
> 
> 
> 
> At this point I suggest check your networking setup. Perhaps your
> router/firewall to the internet is doing something funny?

My Router/Firewall is a good old Sun IPX (yeah! Still alive an running
NetBSD), a tcpdump on this machine shows the following:

# /usr/sbin/tcpdump -n net 192.168.222.100/30
tcpdump: listening on le0
11:46:58.189533 192.168.222.103.62525 > 192.168.222.7.53:  12258+ A? 
www.suse.com. (30)
11:46:58.248031 192.168.222.7.53 > 192.168.222.103.62525:  12258* 1/3/3 
A[|domain]
11:46:58.288924 192.168.222.103 > 195.135.220.3: icmp: echo request seq 128
11:46:58.311730 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 128
11:46:59.276963 192.168.222.103 > 195.135.220.3: icmp: echo request seq 129
11:46:59.302697 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 129
11:47:00.293260 192.168.222.103 > 195.135.220.3: icmp: echo request seq 130
11:47:00.316296 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 130
11:47:01.308183 192.168.222.103 > 195.135.220.3: icmp: echo request seq 131
11:47:01.330296 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 131
11:47:01.632880 arp who-has 192.168.222.7 tell 192.168.222.102
11:47:01.633120 arp reply 192.168.222.7 is-at 8:0:20:b:cf:35
11:47:01.633755 192.168.222.102.51889 > 192.168.222.7.53:  46997+ A? 
www.suse.com. (30)
11:47:01.637738 192.168.222.7.53 > 192.168.222.102.51889:  46997 1/3/3 A 
195.135.220.3 (171)

## here the second DomU send out a ping
11:47:01.706935 192.168.222.102 > 195.135.220.3: icmp: echo request seq 13
11:47:02.323624 192.168.222.103 > 195.135.220.3: icmp: echo request seq 132
11:47:02.347712 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 132
11:47:02.761024 arp who-has 192.168.222.7 (8:0:20:b:cf:35) tell 192.168.222.103
11:47:02.761270 arp reply 192.168.222.7 is-at 8:0:20:b:cf:35
11:47:03.339145 192.168.222.103 > 195.135.220.3: icmp: echo request seq 133
11:47:03.361077 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 133
11:47:04.338974 192.168.222.103 > 195.135.220.3: icmp: echo request seq 134
11:47:04.360643 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 134
11:47:05.339085 192.168.222.103 > 195.135.220.3: icmp: echo request seq 135
11:47:05.361956 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 135
11:47:06.354563 192.168.222.103 > 195.135.220.3: icmp: echo request seq 136
11:47:06.378167 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 136

## here the second DomU send out the next ping
11:47:06.508449 192.168.222.102 > 195.135.220.3: icmp: echo request seq 14
11:47:07.382269 192.168.222.103 > 195.135.220.3: icmp: echo request seq 137
11:47:07.404318 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 137
11:47:08.416702 192.168.222.103 > 195.135.220.3: icmp: echo request seq 138
11:47:08.438996 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 138
11:47:09.416554 192.168.222.103 > 195.135.220.3: icmp: echo request seq 139
11:47:09.439017 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 139
11:47:10.432055 192.168.222.103 > 195.135.220.3: icmp: echo request seq 140
11:47:10.454572 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 140
11:47:11.447678 192.168.222.103 > 195.135.220.3: icmp: echo request seq 141
11:47:11.470148 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 141
11:47:11.507820 192.168.222.102 > 195.135.220.3: icmp: echo request seq 15
11:47:12.464524 192.168.222.103 > 195.135.220.3: icmp: echo request seq 142
11:47:12.487608 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 142
...

So it seems, that the remote host does not reply.

Please note, when I ping from Dom0 *and* from one of the DomU's at the same 
time,
it works fine. Just en excerpt from tcpdump in this case.

11:56:19.338397 192.168.222.103 > 195.135.220.3: icmp: echo request seq 254
11:56:19.360969 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 254
11:56:19.930122 192.168.222.16 > 195.135.220.3: icmp: echo request seq 12 (DF)
11:56:19.953969 195.135.220.3 > 192.168.222.16: icmp: echo reply seq 12
11:56:20.338293 192.168.222.103 > 195.135.220.3: icmp: echo request seq 255
11:56:20.367243 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 255
11:56:20.934662 192.168.222.16 > 195.135.220.3: icmp: echo request seq 13 (DF)
11:56:20.971703 195.135.220.3 > 192.168.222.16: icmp: echo reply seq 13
11:56:21.353869 192.168.222.103 > 195.135.220.3: icmp: echo request seq 256
11:56:21.388060 195.135.220.3 > 192.168.222.103: icmp: echo reply seq 256
11:56:21.937585 192.168.222.16 > 195.135.220.3: icmp: echo request seq 14 (DF)
11:56:21.960194 195.135.220.3 > 192.168.222.16: icmp: echo reply seq 14

However, I will investigate this at a later moment.

Thanks
Wolfgang

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users