can't connect to MikroTik RouterOS 6.27

[haakonnessjoen]

can't connect to MikroTik RouterOS 6.27

[haakonnessjoen]

Have you tried with the -n parameter?

[cypa]

-n gives the samebtw, log print tells nothing about mac-telnet login attemptsAndrej27.09.2016, 03:18, "Håkon Nessjøen" [email protected]:Have you tried with the -n parameter?

Den mandag 26. september 2016 skrev cypa [email protected]
følgende:

got no success connecting to 6.27 RB2011 on CentOS 6.6
got this output:

$ sudo mactelnet 4c:5e:c:5f:ba:f -u asurkov
Password:
Connecting to 4c:5e:c:5f:ba:f...Connection failed.
$

is there debug mode ... could you give me digging direction, please ;)

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#22, or mute the
thread
https://github.com/notifications/unsubscribe-auth/AAZbm55YM1…
.

Håkon

—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.

[cypa]

btw, how to sniffer mac-telnet protocol ... what is filter expression?Andrej27.09.2016, 03:18, "Håkon Nessjøen" [email protected]:Have you tried with the -n parameter?

Den mandag 26. september 2016 skrev cypa [email protected]
følgende:

got no success connecting to 6.27 RB2011 on CentOS 6.6
got this output:

$ sudo mactelnet 4c:5e:c:5f:ba:f -u asurkov
Password:
Connecting to 4c:5e:c:5f:ba:f...Connection failed.
$

is there debug mode ... could you give me digging direction, please ;)

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#22, or mute the
thread
https://github.com/notifications/unsubscribe-auth/AAZbm55YM1…
.

Håkon

—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.

[haakonnessjoen]

Hi,

If you use Wireshark, you can use my mactelnet filter, by filtering on mactelnet.

If you could list me the output of your ifconfig, that might help me figuring out what might be the issue. What interface is the RB2011 connected to? And does it come up if using mactelnet -l? What version are you using?

[cypa]

OK, shall try wireshark ... mactelnet runs on CentOS 6 PC connect by 2 copper cables, respectively 2 ethernet interfaces to RB2011-l or mndp lists this RB2011 well  $ mactelnet -lSearching for MikroTik routers... Abort with CTRL+C.IP              MAC-Address       Identity (platform version hardware) uptime10.66.66.8      4c:5e:c:2b:7f:a6  m66.officeburg.ru (MikroTik 6.27 RB2011UiAS-2HnD)  up 0 days 17 hours  3QUV-FMJF office10.66.66.8      4c:5e:c:2b:7f:a6  m66.officeburg.ru (MikroTik 6.27 RB2011UiAS-2HnD)  up 0 days 17 hours  3QUV-FMJF office172.16.66.1     4c:5e:c:2b:7f:a6  m66.officeburg.ru (MikroTik 6.27 RB2011UiAS-2HnD)  up 0 days 17 hours  3QUV-FMJF VoIP172.16.166.1    4c:5e:c:5f:ba:f   colorit (MikroTik 6.27 RB2011UiAS-2HnD)  up 2 days 20 hours  69DQ-BYMR VoIP10.66.66.8      4c:5e:c:2b:7f:a6  m66.officeburg.ru (MikroTik 6.27 RB2011UiAS-2HnD)  up 0 days 17 hours  3QUV-FMJF office172.16.66.1     4c:5e:c:2b:7f:a6  m66.officeburg.ru (MikroTik 6.27 RB2011UiAS-2HnD)  up 0 days 17 hours  3QUV-FMJF VoIP172.16.166.1    4c:5e:c:5f:ba:f   colorit (MikroTik 6.27 RB2011UiAS-2HnD)  up 2 days 20 hours  69DQ-BYMR VoIP27.09.2016, 14:48, "Håkon Nessjøen" [email protected]:Hi,

If you use Wireshark, you can use my mactelnet filter, by filtering on mactelnet.

If you could list me the output of your ifconfig, that might help me figuring out what might be the issue. What interface is the RB2011 connected to? And does it come up if using mactelnet -l? What version are you using?

—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.

[cypa]

thats "tool sniffer save..." file for udp:20561 on all interfaces on RB201127.09.2016, 14:48, "Håkon Nessjøen" [email protected]:Hi,

If you use Wireshark, you can use my mactelnet filter, by filtering on mactelnet.

If you could list me the output of your ifconfig, that might help me figuring out what might be the issue. What interface is the RB2011 connected to? And does it come up if using mactelnet -l? What version are you using?

—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.

[cypa]

and interfaces of the server:$ ip addr1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo    inet 10.56.56.56/32 brd 10.56.56.56 scope host lo    inet6 ::1/128 scope host        valid_lft forever preferred_lft forever2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether f8:1a:67:02:c9:00 brd ff:ff:ff:ff:ff:ff    inet6 fe80::fa1a:67ff:fe02:c900/64 scope link        valid_lft forever preferred_lft forever3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000    link/ether 90:2b:34:a9:be:fa brd ff:ff:ff:ff:ff:ff    inet 10.66.66.24/24 brd 10.66.66.255 scope global eth1    inet6 fe80::922b:34ff:fea9:befa/64 scope link        valid_lft forever preferred_lft forever4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000    link/ether 10:fe:ed:01:43:cf brd ff:ff:ff:ff:ff:ff    inet 10.66.66.7/24 brd 10.66.66.255 scope global eth0    inet 10.66.66.4/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.5/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.3/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.9/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.10/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.11/24 brd 10.66.66.255 scope global secondary eth0    inet 10.66.66.1/24 brd 10.66.66.255 scope global secondary eth0    inet6 fe80::12fe:edff:fe01:43cf/64 scope link        valid_lft forever preferred_lft forever8: lxcbr0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN     link/ether 56:8b:21:ad:52:b7 brd ff:ff:ff:ff:ff:ff    inet 10.199.66.1/24 brd 10.199.66.255 scope global lxcbr0    inet6 fe80::548b:21ff:fead:52b7/64 scope link        valid_lft forever preferred_lft forever16: eth2.206@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP     link/ether f8:1a:67:02:c9:00 brd ff:ff:ff:ff:ff:ff    inet 172.16.206.4/24 brd 172.16.206.255 scope global eth2.206    inet6 fe80::fa1a:67ff:fe02:c900/64 scope link        valid_lft forever preferred_lft forever17: eth0.205@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP     link/ether 10:fe:ed:01:43:cf brd ff:ff:ff:ff:ff:ff    inet6 fe80::12fe:edff:fe01:43cf/64 scope link        valid_lft forever preferred_lft forever18: eth1.205@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP     link/ether 90:2b:34:a9:be:fa brd ff:ff:ff:ff:ff:ff    inet 172.16.66.4/24 brd 172.16.66.255 scope global eth1.205    inet 172.16.166.2/24 brd 172.16.166.255 scope global eth1.205    inet6 fe80::922b:34ff:fea9:befa/64 scope link        valid_lft forever preferred_lft forever19: eth2.205@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP     link/ether f8:1a:67:02:c9:00 brd ff:ff:ff:ff:ff:ff    inet 172.16.206.4/24 brd 172.16.206.255 scope global eth2.205    inet6 fe80::fa1a:67ff:fe02:c900/64 scope link        valid_lft forever preferred_lft forever26: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1456 qdisc pfifo_fast state UNKNOWN qlen 100    link/[65534]     inet 10.66.65.1 peer 10.66.65.2/32 scope global tun027: tun1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100    link/[65534]     inet 10.66.64.1 peer 10.66.64.2/32 scope global tun127.09.2016, 14:48, "Håkon Nessjøen" [email protected]:Hi,

If you use Wireshark, you can use my mactelnet filter, by filtering on mactelnet.

If you could list me the output of your ifconfig, that might help me figuring out what might be the issue. What interface is the RB2011 connected to? And does it come up if using mactelnet -l? What version are you using?

—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.

[haakonnessjoen]

Hi,

The formatting here makes the info really unreadable. Could you either use pastebin.com, or send the output to my email address? [email protected]

[haakonnessjoen]

But at first glance. It seems like you are using the same subnet on several interfaces. And might it be that some of those interfaces are not connected to the physically same network? This is not good.

Also, if those interfaces are in a bridge on the box itself, they should not have ip address at all, only the bridge should. But I am having problems understanding the output because of the missing newlines.

[cypa]

it was firewall on CentOS, my fault
next firewall rule does the thing

iptables -A INPUT -m udp -p udp --source 0.0.0.0/32 --sport 20561 -j ACCEPT