Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(ASCEND) RE: Interpeting data from wddialout
Good Luck!! I went through the same thing and is one of the reasons I
joined this list. I submitted an inquiry to Ascend and besides their
original response of it looks like a NetBIOS packet please check our
tech support site for NetBIOS call filters, I was TOTALLY IGNORED and
to date still have not received any attempt at an acknowledgement of
my subsequent email (other than the auto-responder, this is ticket #
blah blah blah.) I eventually downloaded a utility called NetAnt (I
believe it was from www.windows95.com) to analyze the packets that
were initiating the dialout. Unfortunately the demo version of NetAnt
(the REAL version costs $600.00....and for a Network Admin, I would
say, WELL WORTH THE MONEY!!) only displays the first 5 packets. It
took some diligence in reactivating the packet capture to determine
what the hex packet meant and what protocol was initiating it.
I don't know if I quite understand your question but if you mean that
a number is calling your P75 then your P75 is calling back and you're
trying to figure out what number is dialing YOU, to cause YOUR P75 to
call back, don't read any further.
For whatever it's worth, I'm running Win95/NT on a LAN w/
NetBEUI/NetBIOS & TCP/IP and this is the call filter I ended up using
that stopped the dreaded never ending session (DO NOT TRY TO UPLOAD
THIS TO YOUR PIPELINE, I manually created this to show you my entries
and I don't know if it is the proper format for UPLOAD):
[Allow no incoming packets to keep up the line]
In filter 01...Valid=Yes
In filter 01...Type=Generic
In filter 01...Forward=No
In filter 01...Offset=0
In filter 01...Length=0
In filter 01...Mask=0000000000000000
In filter 01...Value=0000000000000000
In filter 01...Compare=Equals
In filter 01...More=No
[ICMP packets do not reset call timer]
Out filter 01...Valid=Yes
Out filter 01...Type=IP
Out filter 01...Forward=No
Out filter 01...Src Mask=0.0.0.0
Out filter 01...Src Adrs=0.0.0.0
Out filter 01...Dst Mask=0.0.0.0
Out filter 01...Dst Adrs=0.0.0.0
Out filter 01...Protocol=1
Out filter 01...Src Port Cmp=None
Out filter 01...Src Port #=N/A
Out filter 01...Dst Port Cmp=None
Out filter 01...Port #=N/A
Out filter 01...TCP Estab=N/A
[NETBIOS Name Service packets do not reset call timer]
Out filter 02...Valid=Yes
Out filter 02...Type=IP
Out filter 02...Forward=No
Out filter 02...Src Mask=0.0.0.0
Out filter 02...Src Adrs=0.0.0.0
Out filter 02...Dst Mask=0.0.0.0
Out filter 02...Dst Adrs=0.0.0.0
Out filter 02...Protocol=17
Out filter 02...Src Port Cmp=Eql
Out filter 02...Src Port #=137
Out filter 02...Dst Port Cmp=None
Out filter 02...Dst Port #=N/A
Out filter 02...TCP Estab=N/A
[NETBIOS Datagram Service packets do not reset call timer]
Out filter 03...Valid=Yes
Out filter 03...Type=IP
Out filter 03...Forward=No
Out filter 03...Src Mask=0.0.0.0
Out filter 03...Src Adrs=0.0.0.0
Out filter 03...Dst Mask=0.0.0.0
Out filter 03...Dst Adrs=0.0.0.0
Out filter 03...Protocol=17
Out filter 03...Src Port Cmp=Eql
Out filter 03...Src Port #=138
Out filter 03...Dst Port Cmp=None
Out filter 03...Dst Port #=N/A
Out filter 03...TCP Estab=N/A
[NETBIOS Session Service packets do not reset call timer]
Out filter 04...Valid=Yes
Out filter 04...Type=IP
Out filter 04...Forward=No
Out filter 04...Src Mask=0.0.0.0
Out filter 04...Src Adrs=0.0.0.0
Out filter 04...Dst Mask=0.0.0.0
Out filter 04...Dst Adrs=0.0.0.0
Out filter 04...Ip...Protocol=17
Out filter 04...Ip...Src Port Cmp=Eql
Out filter 04...Ip...Src Port #=139
Out filter 04...Dst Port Cmp=None
Out filter 04...Dst Port #=N/A
Out filter 04...TCP Estab=N/A
[UDP or SOCKS packets do not reset call timer - I use for ICQ]
Out filter 05...Valid=Yes
Out filter 05...Type=IP
Out filter 05...Forward=No
Out filter 05...Src Mask=0.0.0.0
Out filter 05...Src Adrs=0.0.0.0
Out filter 05...Dst Mask=0.0.0.0
Out filter 05...Dst Adrs=0.0.0.0
Out filter 05...Protocol=17
Out filter 05...Src Port Cmp=None
Out filter 05...Src Port #=N/A
Out filter 05...Dst Port Cmp=Gtr
Out filter 05...Dst Port #=1023
Out filter 05...TCP Estab=N/A
[All OTHER outgoing ARP packets WILL reset call timer]
Out filter 10...Valid=Yes
Out filter 10...Type=Generic
Out filter 10...Forward=Yes
Out filter 10...Offset=12
Out filter 10...Length=2
Out filter 10...Mask=ffff000000000000
Out filter 10...Value=0806000000000000
Out filter 10...Compare=Equals
Out filter 10...More=No
[All OTHER outgoing IP packets WILL reset call timer]
Out filter 11...Valid=Yes
Out filter 11...Type=Generic
Out filter 11...Forward=Yes
Out filter 11...Offset=12
Out filter 11...Length=2
Out filter 11...Mask=ffff000000000000
Out filter 11...Value=0800000000000000
Out filter 11...Compare=Equals
Out filter 11...More=No
[All packets NOT fitting the ABOVE criteria WILL reset call timer]
Out filter 12...Valid=Yes
Out filter 12...Type=Generic
Out filter 12...Forward=Yes
Out filter 12...Offset=0
Out filter 12...Length=0
Out filter 12...Mask=0000000000000000
Out filter 12...Value=0000000000000000
Out filter 12...Compare=Equals
Out filter 12...More=No
One last comment: I think the order of the filters make a difference
also (e.g., if you put the Out filter 12 as Out filter 1 then
EVERYTHING will reset the call timer because it works it's way down
the filters in ascending order checking the criteria then stops if it
meets one.)
Hope this helps. Again....GOOD LUCK!!!
Darryl
-----Original Message-----
From: owner-ascend-users@max.bungi.com [mailto:craig@epilogics.com] On
Behalf Of Craig
Sent: Tuesday, March 10, 1998 8:46 PM
To: 'ascend-users@max.bungi.com'
Subject: Interpeting data from wddialout
Help!
I am trying to write a filter to prevent random and unwanted TCP/IP
dialouts on an ascend Pipeline 75. I think I have a fundamental
understanding of how to write the filter but am not certain how to
locate the number that is actually initiating the call. The hex-dump
from the wddialout debug command looks like this…….
Date: 01/01/1990. Time: 05:42:50
Cause an attempt to place call to 16194589062
WD_DIALOUT_DISP: chunk 26872E type IP.
(task: 2688D0, time: 20570.40) 60 octets @ 2A9A68
[0000]: 00 C0 7B 6E 85 A3 00 60 97 CA 0A 54 08 00 45 00
[0010]: 00 3C C9 88 00 00 7F 11 DB 7D D0 89 FD 94 D0 89
[0020]: F8 02 06 04 00 35 00 28 B9 25 00 01 01 00 00 01
[0030]: 00 00 00 00 00 00 03 77 77 77 06 6E
Any help would be greatly appreciated.
Craig
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: