Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
mysterious dhcpcd behaviour
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
albright
Advocate
Advocate


Joined: 16 Nov 2003
Posts: 2588
Location: Near Toronto

PostPosted: Fri Feb 06, 2009 1:35 pm    Post subject: mysterious dhcpcd behaviour Reply with quote

Hi all. I have a cable modem attached to a computer which serves
as router for my home network. My logs report that last night
something strange happened.

First:

Code:
Feb  6 01:25:02 gothmog eth1: link down
Feb  6 01:25:03 gothmog dhcpcd[3929]: eth1: carrier lost
Feb  6 01:25:05 gothmog eth1: link up, 100Mbps, full-duplex, lpa 0x41E1
Feb  6 01:25:05 gothmog dhcpcd[3929]: eth1: carrier acquired
Feb  6 01:25:05 gothmog dhcpcd[3929]: eth1: rebinding lease of 24.235.184.22
Feb  6 01:25:08 gothmog eth1: link down
Feb  6 01:25:08 gothmog dhcpcd[3929]: eth1: carrier lost
Feb  6 01:25:09 gothmog eth1: link up, 100Mbps, full-duplex, lpa 0x41E1
Feb  6 01:25:09 gothmog dhcpcd[3929]: eth1: carrier acquired
Feb  6 01:25:10 gothmog dhcpcd[3929]: eth1: rebinding lease of 24.235.184.22
Feb  6 01:25:40 gothmog dhcpcd[3929]: eth1: failed to rebind
Feb  6 01:25:40 gothmog dhcpcd[3929]: eth1: broadcasting for a lease


So this seems to me (I know very little about networking) that the connection
to my provider was down for a while and then tried to come back up.

But then this appears:

Code:
Feb  6 01:25:40 gothmog dhcpcd[3929]: eth1: offered 192.168.100.29 from 192.168.100.1
Feb  6 01:25:40 gothmog dhcpcd[3929]: eth1: checking 192.168.100.29 is available on attached networks
Feb  6 01:25:42 gothmog named[8850]: network unreachable resolving 'www.linkedin.com/A/IN': 192.5.6.30#53


There follows hundreds (at least) messages like the last one ...

Eventually, about 15 minutes later I got a proper IP from my cable company and
everything worked again.

192.168.100.1 seems to be a computer in the IANA system, so what is going on here?

Am I misconfigured or is this a problem with my cable company, or ...?

Any advice welcome.
_________________
.... there is nothing - absolutely nothing - half so much worth
doing as simply messing about with Linux ...
(apologies to Kenneth Graeme)
Back to top
View user's profile Send private message
depontius
Advocate
Advocate


Joined: 05 May 2004
Posts: 3509

PostPosted: Fri Feb 06, 2009 3:21 pm    Post subject: Reply with quote

It's possible that someone on your cable network is running a rogue DHCP server. Years ago when I first went cable, I ran into the same thing. Shortly later I had reason to talk to tech support, and found out that indeed there had been a rogue DHCP server on the segment. The reason to run a rogue server is so that they can own either your DNS lookups or all of your traffic. At that point, they could sift whatever they want to out of your traffic, for whatever information they want.

Quite frequently the cable company will run its infrastructure in IANA space, but from what I've seen they run it in the ClassA IANA - 10.x.x.x, not the ClassC 192.168.x.x. Back in the old days, when I ran a dual-homed bastion host right on the Internet, I could see the ID of my DHCP server, and it was normally on the 10.x.x.x network. But it assigned me a good, routable address, and my default route was in that same subnet.

AFAIK major ISPs all assign routable addresses. In this case, you have not been given one - you've been given an IANA address, and no doubt your default route is through one, also. I would disconnect, contact tech support, and NOT do anything significant on the Internet until you've sorted this out.
_________________
.sigs waste space and bandwidth
Back to top
View user's profile Send private message
treefinger
n00b
n00b


Joined: 25 Aug 2008
Posts: 17

PostPosted: Fri Feb 06, 2009 8:23 pm    Post subject: Reply with quote

it is your internal NIC asking your what would be WAN nic if it would like an IP.
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21633

PostPosted: Sat Feb 07, 2009 3:17 am    Post subject: Reply with quote

treefinger wrote:
it is your internal NIC asking your what would be WAN nic if it would like an IP.


What? I am not sure what you are trying to convey here, but I see no evidence that he even has a dual homed system. The explanation from depontius seems much more likely.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum