getaddrinfo failed: Servname not supported for ai_socktype
Matthew Kitchin (public/usenet)
mkitchin.public at gmail.com
Sat Aug 7 13:46:04 EDT 2010
On 8/7/2010 10:49 AM, David Woodhouse wrote:
>
> It looks like the routes are all set up according to your VPN server's
> configuration. You aren't routing *everything* to the VPN; only three
> "Class B" subnets -- 10.85.0.0/16, 10.92.0.0/16 and 172.27.0.0/16. You
> seem to have DNS set up properly to point to the VPN too.
>
> What makes you say it isn't working? What have you tried?
>
> If you run 'tcpdump -i tun0 -l -n -s 1500' do you see traffic on the
> VPN? From your log it looks like you're sending packets but never
> getting anything back.
>
> From another machine on the internal network, can you ping your VPN IP
> address? Do you see incoming packets then?
>
Correct. We are only routing a few subnets.
I tried to ping and telnet to a server on the 10.85.0.x network.
I'll have to get some info from our network engineer so I can access the
actual ASA box?
tcpdump is below. If I'm reading it correctly, it shows no return traffic.
I can ping my VPN IP from a PC on the 10.92.0.0 segment.
C:\Users\mkitchin>ping 10.70.6.102
Pinging 10.70.6.102 with 32 bytes of data:
Reply from 10.70.6.102: bytes=32 time=41ms TTL=63
AND Never mind.....
I can ping something on the 10.92.X.X segment. That works! I just can't
ping anything on the the 10.85.0.X segment. That could very well be
something on our end.
I am up and running though! I will start putting it through some stress
tests to see if I can get better results that the workaround we had to
do with VPNC. If I can, I will then beg for help with the OpenWRT part.
If I could get a tar of the directory (definitely including the
makefile!) that was used to compile the existing version in OpenWRT, I'm
pretty sure I could work with that to make a newer package.
[root at VM-MKLinux ~]# tcpdump -i tun0 -l -n -s 1500
tcpdump: WARNING: arptype 65534 not supported by libpcap - falling back
to cooke d socket
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on tun0, link-type LINUX_SLL (Linux cooked), capture size 1500
bytes
12:37:14.830886 IP 10.70.6.102.45755 > 10.85.0.11.domain: 54649+ AAAA?
mirrors. arsc.edu. (34)
12:37:14.909903 IP 10.70.6.102 > 10.85.0.10: ICMP echo request, id
47403, seq 4, length 64
12:37:15.909625 IP 10.70.6.102 > 10.85.0.10: ICMP echo request, id
47403, seq 5, length 64
12:37:16.910638 IP 10.70.6.102 > 10.85.0.10: ICMP echo request, id
47403, seq 6, length 64
12:37:17.910379 IP 10.70.6.102 > 10.85.0.10: ICMP echo request, id
47403, seq 7, length 64
12:37:18.910228 IP 10.70.6.102 > 10.85.0.10: ICMP echo request, id
47403, seq 8, length 64
12:37:19.831129 IP 10.70.6.102.57366 > 10.85.0.10.domain: 29428+ AAAA?
mirrors. arsc.edu.unix. (39)
More information about the openconnect-devel
mailing list