Mac 10.6 and possibly some Linux/Unix Troubleshooting

The wireless connection is probably dropping and bringing the interface down…

post up some traffic logs player!

+1 for some wireshark/tcpdump action

I never looked before but is there logging for connects/disconnects in /var/log/messages or somewhere for associating with an AP and losing connection.

dhclient should log somewhere.

I don’t think os x uses dhclient

---------- Post added at 02:44 PM ---------- Previous post was at 02:40 PM ----------

there is a debug mode that you can run with ifconfig. do a ‘man ifconfig’ for more information

also, run the command: ipconfig getpacket <interface>

post the output

to find the interface, run the ifconfig command. It’s usually wlan0 for wireless, en0 for wired

---------- Post added at 02:50 PM ---------- Previous post was at 02:44 PM ----------

The lease time that mine spits out is a hexidecimal, which when converted, comes out to be 24 hours…I’m wondering what yours is.

Apparently getpacket doesnt work? I entered ifconfig getpacket en1 and it didn’t take the password

Still trying to figure out wireshark

ipconfig, not ifconfig…I know, its kind of backwards

op = BOOTREPLY
htype = 1
flags = 0
hlen = 6
hops = 1
xid = 3388955609
secs = 25
ciaddr = 0.0.0.0
yiaddr = 10.200.20.225
siaddr = 10.200.0.2
giaddr = 0.0.0.0
chaddr = 0:26:bb:9:dc:fc
sname = 
file = 
options:
Options count is 9
dhcp_message_type (uint8): ACK 0x5
server_identifier (ip): 1.1.1.1
lease_time (uint32): 0x151800
subnet_mask (ip): 255.255.0.0
router (ip_mult): {10.200.0.2}
domain_name_server (ip_mult): {3 DNS SERVERS}
renewal_t1_time_value (uint32): 0xa8c00
rebinding_t2_time_value (uint32): 0x127500
end (none): 

sudo cat /var/db/dhcpclient/leases/en1*

Doesn’t DHCP start looking for the renewal 1/2 way through the lease?

I just looked it up, it looks like it does.

According to the values he posted though, these are pretty long leases (16 days)

Here is some info from the System.log

Jan 26 15:36:05: --- last message repeated 1 time ---
Jan 26 15:36:05 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:36:18 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:36:18 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:36:27 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:36:27 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:36:51 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:36:51 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:36:51 Apple-Macbook ntpd[23]: sendto(17.151.16.23) (fd=22): Network is unreachable
Jan 26 15:37:03 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:37:03 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:37:12 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:37:12 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:37:36 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:37:36 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:37:48 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:37:48 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:37:57 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:37:57 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:38:41 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:38:41 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:38:53 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:38:53 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:39:02 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:39:02 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:39:28 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:39:28 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:39:43 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:39:43 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:39:52 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:39:52 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:40:38 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:40:38 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:40:48 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:40:48 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:40:56 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:40:56 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:41:25 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:41:25 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:41:38 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:41:38 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:41:47 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:41:47 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:42:11 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:42:11 Apple-Macbook mDNSResponder[32]: RegisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:42:23 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:42:23 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!
Jan 26 15:42:32 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:42:32 Apple-Macbook mDNSResponder[32]: DeregisterInterface: Frequent transitions for interface en1 (10.200.20.225)
Jan 26 15:43:17 Apple-Macbook configd[13]: network configuration changed.
Jan 26 15:43:18 Apple-macbook configd[13]: setting hostname to "Apple-macbook.local"
Jan 26 15:43:30 Apple-macbook configd[13]: network configuration changed.
Jan 26 15:43:30 Apple-Macbook configd[13]: setting hostname to "Apple-Macbook.local"
Jan 26 15:43:43 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Matched device: 00:26:BB:09:DC:FC, Name: en1, Gateway IP: 10.200.0.2
Jan 26 15:43:43 Apple-Macbook [0x0-0x17017].com.cisco.cca.CCAAgent[166]: Refresh DHCP lease succeeded!

The interface is dropping the wifi connection

“Frequent transitions for interface”

Yeah that’s the problem. Only seems to happen on 10.6+ Macs, and only they with DHCP. I’m trying to find the root of this.

I bet its got nothing to do with DHCP

You probably don’t notice with a static IP because its reconnecting so fast its only taking 2-3sec to reconnect.

You try running a constant ping and see if you get packet loss?

Edit: Seems other people have similar issues with 10.5 also

that configd message is worrying me the most, it could be causing the drops (the fact that it logs before the drop is what makes me think that).

do you have a utility called ‘instruments’ on that machine? If so, open it up, and run configd through it.

pinged Google with 100% packet loss wtf?

The above log is with DHCP but will be the same with a static IP as well.

<EDIT>

Nope nothing called instruments.

Oh the configd message is when the wireless drops and then again when it reconnects…they’re usually one right after another.

your router/firewall at work probably has outgoing pings disabled

trying pinging to a machine in the network

I agree. It seems like a hardware thing than a DHCP thing. People are posting online of people getting their aircards replaced.

right, but if a config changes, maybe then the connection is bounced

I’m just trying to work out what parts of the problem are a symptom and what part is a cause.

I got almost 40 Macs we’ve assigned Static IPs too, so I hope it’s not a aircard issue.