Solved

Debian Linix GRE protocol forwarding

Posted on 2007-03-18
6
2,969 Views
Last Modified: 2013-12-06
I'm using tcpdump to see if gre protocol is forwarding properly from my Debian linux box.

Here is the command I'm using
tcpdump -i eth0 proto 47 > /root/dump.txt
But the log file is empty I'm thinking because the protocol isn't even coming in, right?
When I look for protocol 6 (tcp) it fills up as I try and pptp in.  Any ideas?  Should I be seeing the gre protocol coming in?
0
Comment
Question by:MainStaySolutions
  • 2
  • 2
  • 2
6 Comments
 
LVL 8

Expert Comment

by:frashii
ID: 18855625
You might want to check to see that you are monitoring the correct interface... When I ran the following command on eth0, I got no packets... but when I ran it on ppp0 I did.

Do an ifconfig and see if there are other interfaces.

firewall:/root # tcpdump -i ppp0 proto 47
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
20:15:34.259140 IP xxxx.dyndns.org > xxxx.nwc.acsalaska.net: call 1039 ack 4294967295 no-payload
20:15:34.280656 IP xxx.dyndns.org > xxxx.nwc.acsalaska.net: call 1039 seq 0 gre-ppp-payload

2 packets captured
3 packets received by filter
0 packets dropped by kernel

firewall:/root # tcpdump -i eth0 proto 47
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes

0 packets captured
0 packets received by filter
0 packets dropped by kernel
0
 
LVL 8

Expert Comment

by:frashii
ID: 19006443
*ping* Did monitoring the ppp0 (or other encapsulated interface) show the GRE packets ?
0
 

Author Comment

by:MainStaySolutions
ID: 20728161
No it didnt.
0
Master Your Team's Linux and Cloud Stack

Come see why top tech companies like Mailchimp and Media Temple use Linux Academy to build their employee training programs.

 
LVL 19

Expert Comment

by:http:// thevpn.guru
ID: 20728231
try

iptables -A OUPUT -p tcp --dport 47 -j LOG
iptables -A FORWARD -p tcp --dport 47 -j LOG
iptables -A INPUT -p tcp --dport 47 -j LOG

or UDP ..and then
tail -f /var/log/syslog and you will see the packets being logged if they are incoming/outgoing or being forwarded by the system
0
 

Author Comment

by:MainStaySolutions
ID: 20733771
Thanks for the reply.  Interesting, I'm not seeing anything in the log files as I try to vpn through it.  I'm assuming that it means gre isn't passing through.
0
 
LVL 19

Accepted Solution

by:
http:// thevpn.guru earned 250 total points
ID: 20733797
Not necessarily in VPN is your traffic encrypted ?
0

Featured Post

Master Your Team's Linux and Cloud Stack!

The average business loses $13.5M per year to ineffective training (per 1,000 employees). Keep ahead of the competition and combine in-person quality with online cost and flexibility by training with Linux Academy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VMware Workstation 12 Player 16 73
Remote desktop Ubuntu from Windows 10 5 60
winscp where are logs stored 3 35
centos commands 6 53
Linux users are sometimes dumbfounded by the severe lack of documentation on a topic. Sometimes, the documentation is copious, but other times, you end up with some obscure "it varies depending on your distribution" over and over when searching for …
The purpose of this article is to demonstrate how we can use conditional statements using Python.
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question