{"id":63,"date":"2005-09-09T00:01:10","date_gmt":"2005-09-08T15:01:10","guid":{"rendered":"https:\/\/regex.info\/blog\/2005-09-09\/63"},"modified":"2005-09-09T00:06:01","modified_gmt":"2005-09-08T15:06:01","slug":"a-wasted-day-futzing-with-networking","status":"publish","type":"post","link":"https:\/\/regex.info\/blog\/2005-09-09\/63","title":{"rendered":"A Wasted Day Futzing With Networking"},"content":{"rendered":"<p>I had a miserable day fighting with networking issues today. You don't\nwant to hear about it, unless <span class='nobr'>I ended<\/span> up solving the same problem you have\n(which is why I'm writing this -- for the search engines to pick up).\n<\/p>\n\n<p>A few days ago, some web sites suddenly seemed mostly unaccessible\n(accessible, say, 5% of the time), while others were just fine. Since most\nYahoo! sites were among the missing, this was <span class='nobr'>a big<\/span> problem.\n\n<\/p><p>The other day I was able to pinpoint that the problem occurred when\n<span class='nobr'>I used<\/span> my router (<a\nhref=\"http:\/\/www.corega-international.info\/2\/1341\/1423\/1356\/chprd.html\">Corega\nBAR-SD<\/a>) inline between <a href=\"http:\/\/www.em-net.ne.jp\/\">my ISP<\/a>\nand my computers. So, today <span class='nobr'>I tried<\/span> to get to the bottom of it.\n\n<\/p><p>Upgrading the router's firmware didn't solve the problem.\n<\/p><p>&#8220;The problem&#8221;, in this case, is that <span class='nobr'>I could<\/span> connect to\nsome sites, but nothing would be returned before the connection would time\nout. So, <span class='nobr'>I installed<\/span> Ethereal (now called <span class='QO'>&#8220;<\/span><a href='https:\/\/www.wireshark.org'>Wireshark<\/a><span class='QC'>&#8221;<\/span>), <span class='nobr'>a network<\/span>\nprotocol analyzer, to watch what was happening. <span class='nobr'>I'm not a<\/span> network expert by\nany means, but <span class='nobr'>I could<\/span> see that there many duplicate ACKs, which is\nprobably not good.\n\n<\/p><p><a href=\"http:\/\/unixwiz.net\/\">My brother<\/a> recommend that <span class='nobr'>I also<\/span>\nsniff the traffic on the other side of the router, to see if the traffic\nwas leaving the router properly. So, <span class='nobr'>I went through<\/span> the hassle to put one\ncomputer on the outside of the router, and another on the inside, and then\ntried to watch what happened as the from-the-inside request timed out.\n\n<\/p><p>Unfortunately, <span class='nobr'>I used a<\/span> switch rather than <span class='nobr'>a hub<\/span> to hook up both the\nrouter and the outside-the-router computer to my ISP, which means that the\noutside-the-router computer didn't see any traffic from the router itself.\nDoh. <span class='nobr'>I don't<\/span> have <span class='nobr'>a non<\/span>-switching hub. Sigh.\n\n<\/p><p>In the process of this, though, <span class='nobr'>I'd run Ethereal<\/span> on my wife's XP box\nand noticed that some apparent nasty-ware was contacting\n&#8220;offerapp.com&#8221; (67.29.139.222) serendipitously. So, this\nstarted the tangent of running the Anti-Spy component of <a\nhref=\"http:\/\/toolbar.yahoo.com\/\">Yahoo! Toolbar<\/a> and <a\nhref=\"http:\/\/www.microsoft.com\/athome\/security\/spyware\/software\/default.mspx\">Microsoft\u00ae\nWindows AntiSpyware<\/a>, but <span class='nobr'>a subsequent<\/span> test still showed the traffic.\nSigh. Must look into this later.\n\n<\/p><p>Back to my router problem, <span class='nobr'>I decided<\/span> that the router is probably\njust bad, so <span class='nobr'>I rode<\/span> my bike down to the Teramachi <a\nhref=\"http:\/\/joshinweb.jp\/\">Joshin Denki<\/a> to pick up another. While\nlooking for one, <span class='nobr'>I noticed<\/span> that they didn't seem to sell <span class='nobr'>a non<\/span>-switching\nhub. Still, <span class='nobr'>I should<\/span> probably have one on hand just for the type of\nnetwork-sniffing task <span class='nobr'>I ran<\/span> into today.\n\n<\/p><p> Anyway, <span class='nobr'>I ended<\/span> up dropping $50 on a <a\nhref=\"http:\/\/www.corega.co.jp\/product\/list\/router\/barfx2.htm\">Corega\nBARF-X2<\/a> router. (It's actually called &#8220;BAR-FX-2&#8221;, but it's\nmore fun to write as &#8220;BARF-X2&#8221;.) Despite the previous Corega\nrouter apparently dying not much more than <span class='nobr'>a year<\/span> after having bought it, <span class='nobr'>I stuck<\/span> with the Corega over Buffalo (the other choice) because the BARF-X2\nwas likely to have a &#8220;PC Database&#8221; feature (see sidebar\nbelow).<\/p>\n\n<div style=\"float: right; width: 50%; background: #444; border: #833 1px\nsolid; padding: 20px; margin: 20px\"> <center><big>Router &#8220;PC\nDatabase&#8221; Feature<\/big><\/center>\n\n<p>What Corega calls its &#8220;PC Database&#8221; feature may well be <span class='nobr'>a\ncommon<\/span> feature among today's routers, but I'd not heard of it at all until\nnoticing it this week while futzing with my old <a\nhref=\"http:\/\/www.corega-international.info\/2\/1341\/1423\/1356\/chprd.html\">Corega\nBAR-SD<\/a>.\n\n<\/p><p> It's a feature which allows you to reserve <span class='nobr'>a specific<\/span> IP in the\nDHCP pool for <span class='nobr'>a specific<\/span> computer (that is, for <span class='nobr'>a specific<\/span> MAC address).\nThis allows me to, for example, set it up so that my laptop always gets\n192.168.1.4, yet still leave the laptop's network settings at the simple\n&#8220;use DHCP&#8221; settings. <span class='nobr'>It indeed<\/span> uses DHCP, but because I've\nassociated its MAC address with .4 in the router, it always gets .4.\n<\/p><p>This is very cool, especially when NAT and port forwarding are\nconcerned: you can safely forward traffic to an IP and know that it\nwill always reach the specific computer. My dad's router didn't have\nthis feature, and sometimes after <span class='nobr'>a power<\/span> interruption, if he's unlucky,\nhis computer won't get the IP he had before -- the one that has some ports\nhis computer needs forwarded to it -- and he's boned. This &#8220;PC\nDatabase&#8221; feature would solve that.\n\n<\/p><p>One small issue is that while the BAR-SD showed computer names and\nWAP identifiers in its list of connected systems, the BARF-X2 does not.\n<b>)-:<\/b> <\/p><\/div>\n\n<p>So, things worked just fine with the new router, but <span class='nobr'>I was<\/span> still\nwondering if <span class='nobr'>I should<\/span> put my <a href=\"http:\/\/vonage.com\">Vonage<\/a> VoIP\nmodem (<a\nhref=\"http:\/\/broadband.motorola.com\/catalog\/productdetail.asp?ProductID=212\">Motorola\nVG1005v<\/a>) between the ISP and my router, or just as <span class='nobr'>a client<\/span> of the\nrouter. <span class='nobr'>It's simpler<\/span> for me to just put it as <span class='nobr'>a client<\/span> of my router, but\nthere are some benefits to putting it inline before the router. <span class='nobr'>One is that<\/span>\nit will give voice traffic priority over data traffic. However, while that\nmight make an important difference on <span class='nobr'>a small<\/span> DSL\/Cable pipe, it's not\nrelevant on my 50 Mbit uplink (it's advertised as 100 Mbit, but <span class='nobr'>a speed<\/span>\ntest got only about half that).<\/p>\n\n<p>Another benefit of putting the VoIP modem first is that <span class='nobr'>I used<\/span> its MAC\naddress when signing up for <span class='nobr'>a fixed<\/span> public IP from my ISP. Currently, <span class='nobr'>I get up<\/span> to 5 private addresses (the whole building is behind NAT), but once they\nget the paperwork <span class='nobr'>I sent<\/span> in the other day, they'll give me <span class='nobr'>a public<\/span> IP ....\nbut only when the device <span class='nobr'>I registered<\/span> connects. <span class='nobr'>In a fit<\/span> of stupidness the\nother day, <span class='nobr'>I'd given<\/span> the VoIP modem's MAC address. <span class='nobr'>If I put<\/span> the router\nfirst, I'll continue to get the private addresses.\n\n<\/p><p>While rummaging around the VoIP modem's configuration screens, <span class='nobr'>I turned<\/span> off the &#8220;DHCP\/NAT on LAN Port&#8221; feature. <span class='nobr'>I had an<\/span> idea\nwhat it would do, but wasn't quite sure, so gave it <span class='nobr'>a try.<\/span> <span class='nobr'>In one sense<\/span>,\nthe result was as <span class='nobr'>I expected<\/span> -- putting things downstream of it connected\nto my ISP as if it wasn't there. What <span class='nobr'>I didn't<\/span> (and still don't) know is\nhow the modem itself connects in this situation. <span class='nobr'>I suppose<\/span> it's <span class='nobr'>a DHCP<\/span>\nclient itself, consuming an IP, but <span class='nobr'>I don't<\/span> really know.\n\n<\/p><p>Anyway, <span class='nobr'>I then ran<\/span> into the problem of how to turn the DHCP\/NAT back\non. <span class='nobr'>To do that<\/span>, <span class='nobr'>I needed<\/span> to access its menus (at the fixed address of\n192.168.102.1, via its LAN port), but since my ISP was giving me address\nlike 172.16.126.241 (and <span class='nobr'>I was<\/span> getting those even when connected downstream\nvia the LAN port), <span class='nobr'>I felt pretty<\/span> stuck.\n\n<\/p><p>Fast-forward several hours of futzing around and <span class='nobr'>I finally<\/span> figured\nit out: Hooked things up as <b>ISP -&gt; Router -&gt; VoIP -&gt;\nComputer<\/b> and set my router to 192.168.102.5. <span class='nobr'>I was then<\/span> able to see\n192.168.102.1 (the Motorola VoIP modem) from the computer, and turn\nDHCP\/NAT back on. Ugh. Then set the router back to 192.168.1.1 where <span class='nobr'>I like<\/span>\nit, and reconfigure things so that the VoIP Modem is <span class='nobr'>a simple<\/span> client of my\nrouter, as are all my computers (and nothing is downstream from the VoIP\nmodem)\n\n<\/p><p>By the way, why did I care about turning DHCP\/NAT back on? <span class='nobr'>In case we<\/span> bring it with us somewhere, we want to be able to put it inline with our\nsingle-IP connection and still connect with <span class='nobr'>a computer<\/span> plugged into the\nback of the modem. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>I had a miserable day fighting with networking issues today. You don't want to hear about it, unless I ended up solving the same problem you have (which is why I'm writing this -- for the search engines to pick up). <\/p> <p>A few days ago, some web sites suddenly seemed mostly unaccessible (accessible, say, 5% of the time), while others were just fine. Since most Yahoo! sites were among the missing, this was a big problem. <\/p><p>The other day I was able to pinpoint that the problem occurred when I used my router (Corega BAR-SD) inline between my ISP [...]","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/posts\/63"}],"collection":[{"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/comments?post=63"}],"version-history":[{"count":0,"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/posts\/63\/revisions"}],"wp:attachment":[{"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/media?parent=63"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/categories?post=63"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regex.info\/blog\/wp-json\/wp\/v2\/tags?post=63"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}