> Send in tcpdump > > tcpdump > > to see what is not making it through iptables. If you get a ton of junk > obscuring the cvs traffic, use syntax like this (this example will filter out > ssh-related traffic from the tcpdump report) > > tcpdump not port 22 > > It is much much better to see everything and filter out the bad rather than > make assumptions about what is to be seen and ask only to see that.... ie, > this would not be a good idea: > > tcpdump port 2401 and port 2402 When I ran this tcpdump port 2401 and port 2402 it catched nothing.Then I ran only tcpdump This is what I get with tcpdump P jyotsna.sunupdelhi.net.2022 > linux.sunupdelhi.net.cvspserver: S 1071826300:1071826300(0) win 65535 <mss 1460,nop,nop,sackOK> 14:35:51.661234 IP linux.sunupdelhi.net > jyotsna.sunupdelhi.net: icmp 56: host linux.sunupdelhi.net unreachable - admin prohibited 14:35:51.660460 IP linux.sunupdelhi.net.32958 > server1.sunupdelhi.net.domain: 21749+ PTR? 62.1.168.192.in-addr.arpa. (43) 14:35:51.660700 arp who-has linux.sunupdelhi.net tell server1.sunupdelhi.net 14:35:51.660722 arp reply linux.sunupdelhi.net is-at 00:0e:a6:1b:f7:1a 14:35:51.660815 IP server1.sunupdelhi.net.domain > linux.sunupdelhi.net.32958: 21749* 1/0/0 (79) 14:35:51.661568 IP linux.sunupdelhi.net.32958 > server1.sunupdelhi.net.domain: 46968+ PTR? 100.1.168.192.in-addr.arpa. (44) 14:35:51.661701 IP server1.sunupdelhi.net.domain > linux.sunupdelhi.net.32958: 46968* 1/0/0 (80) 14:35:54.625004 IP jyotsna.sunupdelhi.net.2022 > linux.sunupdelhi.net.cvspserver: S 1071826300:1071826300(0) win 65535 <mss 1460,nop,nop,sackOK> 14:35:54.625076 IP linux.sunupdelhi.net > jyotsna.sunupdelhi.net: icmp 56: host linux.sunupdelhi.net unreachable - admin prohibited 14:35:56.643175 arp who-has jyotsna.sunupdelhi.net tell linux.sunupdelhi.net 14:35:56.643287 arp reply jyotsna.sunupdelhi.net is-at 00:02:e3:2f:21:d2 14:35:56.660191 arp who-has server1.sunupdelhi.net tell linux.sunupdelhi.net 14:35:56.660310 arp reply server1.sunupdelhi.net is-at 00:0b:cd:e2:63:5d 14:36:00.640501 IP jyotsna.sunupdelhi.net.2022 > linux.sunupdelhi.net.cvspserver: S 1071826300:1071826300(0) win 65535 <mss 1460,nop,nop,sackOK> 14:36:00.640593 IP linux.sunupdelhi.net > jyotsna.sunupdelhi.net: icmp 56: host linux.sunupdelhi.net unreachable - admin prohibited Thanks & Regards Ankush Grover
