Re: Gratuitous ARP
"Steve Trigero seecwriter-/[email protected] [rabbit-semi]" <[email protected]> Wed, 10 Jan 2018 02:14:29 +0000 (UTC)
| Newsgroups | gmane.comp.hardware.rabbit-semiconductor |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_86560_655690901.1515550470008 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable This is a module that is in the field, so I don't have physical access to = it. The user,=C2=A0in Europe, notified me that the unit keepsdisconnecting = after running for a while. I asked for a wireshark=C2=A0dump and that is wh= at I have.=C2=A0 The module is static IP. The MAC address is always the same. I haven't seen= the connection yet, but I will continue to searchthe data, it's quite larg= e. I haven't figured out how to search for a "syn" flag in wireshark. And n= o, there is no ARP message=C2=A0that the module is responding too. I had a problem with similar symptoms a few years ago. That problem was tra= ced to the ARP cache being too small. I think=C2=A0the default cache size w= as 10. But there were more than 10 devices on the network. And even though = the module had only one=C2=A0tcp connection that it was communicating on, e= very IP address it saw on the network would automatically get added to the = cache.Well, it didn't take too long before the IP address of the host it ha= d a connection with was push off the cache. So the connection=C2=A0was drop= ped and a lot of "who has address" messages started being sent. So I increa= sed the cache to 20, which helped, but didn't=C2=A0solve the problem, just = delayed it. So I increased it 64 and haven't seen a problem yet, until perh= aps now. But looking at thedata, it appears that there are less than 64 dev= ices on the network. But I haven't scanned through all it, so who knows? On Tuesday, January 9, 2018, 3:24:24 PM PST, Tom Collins tom-lnEA/wrDJtPQFizaE/[email protected]= m [rabbit-semi] <[email protected]> wrote:=20 =20 =C2=A0=20=20=20 So you don=E2=80=99t see an ARP on the network that the Rabbit might be res= ponding to. =C2=A0Does the target MAC vary, or is it always the same? Are you using DHCP? =C2=A0If so, could this event be happening around the t= ime of a renewal? Does the TCP connection go to:- the default gateway for the network=C2=A0- = some other local device- a remote device (via the default gateway) Can you enable ARP_VERBOSE for a build, and see what sorts of ARP-related m= essages it=E2=80=99s spitting out right before failing? =C2=A0That might gi= ve a clue as to what=E2=80=99s triggering the ARP request and decision to d= rop the connection (so TCP_VERBOSE or IP_VERBOSE or NET_VERBOSE might also = provide context, but may also require too much space or slow the device dow= n too much). Feel free to email me directly with detailed information to debug the issue= .. =C2=A0If there=E2=80=99s a bug in the DC 9.62 TCP/IP stack, I=E2=80=99d l= ike to get it fixed and pushed up to the GitHub repository. -Tom On Jan 9, 2018, at 10:41 AM, Steve Trigero seecwriter-/[email protected] [rabbit-sem= i] <[email protected]> wrote: I have an RCM3900 module that has a TCP connection with a host. The module = is receiving TCP packets at about a 1-second rate. So everything is humming= along with the host sending TCP packets requesting status info, and module= responds with the data.=C2=A0 After a=C2=A0some time, minutes to hours, of= running, the module issues 2-gratuitous ARP packets, about a second apart.= And upon receiving the next TCP packet, the module responds by closing the= connection. Both gratuitous ARP packets have the same ARP data: Opcode: request (1)Sender MAC address: 00:90:c2:f7:fd:36Sender IP address:= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 192.168.1.64Target MAC address: 3f:c7:01:00:= b4:e5Target IP address:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 192.168.1.64 The target MAC doesn't appear to be valid.=C2=A0 According to what I read, = an opcode of 1 is an ARP Probe or an ARP Announcement.=C2=A0If a probe, the= sender IP and target MAC are supposed to be set to 0, and the target IP se= t to the IP in question (to see if it's taken), and if an announcement, the= sender IP and target IP are set to the same IP and the target MAC is set t= o 0 to announce that this NIC is using this IP address.=C2=A0 The format of= the above doesn't fit either format.=C2=A0=C2=A0Could this=C2=A0be indicat= ing an IP conflict?=C2=A0=C2=A0There is no response to either message. =20=20=20=20 ------=_Part_86560_655690901.1515550470008 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/htm= l4/strict.dtd"> <html> <head> </head> =20 <body style=3D"background-color: #fff;"> <span style=3D"display:none"> </span> <!--~-|**|PrettyHtmlStartT|**|-~--> <div id=3D"ygrp-mlmsg" style=3D"position:relative;"> <div id=3D"ygrp-msg" style=3D"z-index: 1;"> <!--~-|**|PrettyHtmlEndT|**|-~--> <div id=3D"ygrp-text" > =20=20=20=20=20=20 =20=20=20=20=20=20 <p><div style=3D"font-family:times new roman, new york, times, serif;= font-size:16px;"><div></div> <div>This is a module that is in the field, so I don't have phy= sical access to it. The user, in Europe, notified me that the unit kee= ps</div><div>disconnecting after running for a while. I asked for a wiresha= rk dump and that is what I have. </div><div><br></div><div>The mo= dule is static IP. The MAC address is always the same. I haven't seen the c= onnection yet, but I will continue to search</div><div>the data, it's quite= large. I haven't figured out how to search for a "syn" flag in wireshark. = And no, there is no ARP message </div><div>that the module is respondi= ng too.</div><div><br></div><div>I had a problem with similar symptoms a fe= w years ago. That problem was traced to the ARP cache being too small. I th= ink </div><div>the default cache size was 10. But there were more than= 10 devices on the network. And even though the module had only one </= div><div>tcp connection that it was communicating on, every IP address it s= aw on the network would automatically get added to the cache.</div><div>Wel= l, it didn't take too long before the IP address of the host it had a conne= ction with was push off the cache. So the connection </div><div>was dr= opped and a lot of "who has address" messages started being sent. So I incr= eased the cache to 20, which helped, but didn't </div><div>solve the p= roblem, just delayed it. So I increased it 64 and haven't seen a problem ye= t, until perhaps now. But looking at the</div><div>data, it appears that th= ere are less than 64 devices on the network. But I haven't scanned through = all it, so who knows?</div><div><br></div><div><br></div> =20=20=20=20=20=20=20=20=20=20=20=20 <div id=3D"ydpe85b04dyahoo_quoted_5752232709" class=3D"ydpe85b0= 4dyahoo_quoted"> <div style=3D"font-family:'Helvetica Neue', Helvetica, Aria= l, sans-serif;font-size:13px;color:#26282a;"> =20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20 <div>On Tuesday, January 9, 2018, 3:24:24 PM PST, Tom C= ollins tom-lnEA/wrDJtNWk0Htik3J/[email protected] [rabbit-semi] <[email protected]> w= rote:</div> <div><br></div> <div><br></div> <div><div id=3D"ydpe85b04dyiv8446818867"><div> <span> </span> <div id=3D"ydpe85b04dyiv8446818867ygrp-mlmsg"> <div id=3D"ydpe85b04dyiv8446818867ygrp-msg"> <div id=3D"ydpe85b04dyiv8446818867ygrp-text"> =20=20=20=20=20=20 =20=20=20=20=20=20 <p>So you don=E2=80=99t see an ARP on the network that the Rabbit mig= ht be responding to. Does the target MAC vary, or is it always the sa= me?</p><div class=3D"ydpe85b04dyiv8446818867class"><br clear=3D"none" class= =3D"ydpe85b04dyiv8446818867class"></div><div class=3D"ydpe85b04dyiv84468188= 67class">Are you using DHCP? If so, could this event be happening aro= und the time of a renewal?</div><div class=3D"ydpe85b04dyiv8446818867class"= ><br clear=3D"none" class=3D"ydpe85b04dyiv8446818867class"></div><div class= =3D"ydpe85b04dyiv8446818867class">Does the TCP connection go to:</div><div = class=3D"ydpe85b04dyiv8446818867class">- the default gateway for the networ= k </div><div class=3D"ydpe85b04dyiv8446818867class">- some other local= device</div><div class=3D"ydpe85b04dyiv8446818867class">- a remote device = (via the default gateway)</div><div class=3D"ydpe85b04dyiv8446818867class">= <div class=3D"ydpe85b04dyiv8446818867class"><br clear=3D"none" class=3D"ydp= e85b04dyiv8446818867class"></div><div class=3D"ydpe85b04dyiv8446818867class= ">Can you enable ARP_VERBOSE for a build, and see what sorts of ARP-related= messages it=E2=80=99s spitting out right before failing? That might = give a clue as to what=E2=80=99s triggering the ARP request and decision to= drop the connection (so TCP_VERBOSE or IP_VERBOSE or NET_VERBOSE might als= o provide context, but may also require too much space or slow the device d= own too much).</div><div class=3D"ydpe85b04dyiv8446818867class"><br clear= =3D"none" class=3D"ydpe85b04dyiv8446818867class"></div><div class=3D"ydpe85= b04dyiv8446818867class">Feel free to email me directly with detailed inform= ation to debug the issue. If there=E2=80=99s a bug in the DC 9.62 TCP= /IP stack, I=E2=80=99d like to get it fixed and pushed up to the GitHub rep= ository.</div><div class=3D"ydpe85b04dyiv8446818867class"><br clear=3D"none= " class=3D"ydpe85b04dyiv8446818867class"><div class=3D"ydpe85b04dyiv8446818= 867class"> <span class=3D"ydpe85b04dyiv8446818867Apple-style-span" style=3D"border-col= lapse:separate;"></span><div class=3D"ydpe85b04dyiv8446818867class">-Tom</d= iv><br clear=3D"none" class=3D"ydpe85b04dyiv8446818867Apple-interchange-new= line"> </div> <br clear=3D"none" class=3D"ydpe85b04dyiv8446818867class"><div class=3D"ydp= e85b04dyiv8446818867yqt9376575824" id=3D"ydpe85b04dyiv8446818867yqt16998"><= div><blockquote class=3D"ydpe85b04dyiv8446818867class" type=3D"cite"><div c= lass=3D"ydpe85b04dyiv8446818867class">On Jan 9, 2018, at 10:41 AM, Steve Tr= igero <a shape=3D"rect" class=3D"ydpe85b04dyiv8446818867class" href=3D"mail= to:seecwriter-/[email protected]" rel=3D"nofollow" target=3D"_blank">seecwriter@yaho= o.com</a> [rabbit-semi] <<a shape=3D"rect" class=3D"ydpe85b04dyiv8446818= 867class" href=3D"mailto:[email protected]" rel=3D"nofollow" targ= et=3D"_blank">[email protected]</a>> wrote:</div><br clear=3D"= none" class=3D"ydpe85b04dyiv8446818867Apple-interchange-newline"><div class= =3D"ydpe85b04dyiv8446818867class"><div class=3D"ydpe85b04dyiv8446818867clas= s" id=3D"ydpe85b04dyiv8446818867ygrp-mlmsg" style=3D"font-size:13px;font-fa= mily:Arial, helvetica, clean, sans-serif;font-style:normal;font-weight:norm= al;letter-spacing:normal;text-indent:0px;text-transform:none;white-space:no= rmal;word-spacing:0px;"><div class=3D"ydpe85b04dyiv8446818867class" id=3D"y= dpe85b04dyiv8446818867ygrp-msg"><div class=3D"ydpe85b04dyiv8446818867class"= id=3D"ydpe85b04dyiv8446818867ygrp-text" style=3D"font-family:Georgia;"><di= v class=3D"ydpe85b04dyiv8446818867class" style=3D"margin:0px 0px 1em;"><br = clear=3D"none" class=3D"ydpe85b04dyiv8446818867webkit-block-placeholder"></= div><div class=3D"ydpe85b04dyiv8446818867class" style=3D"font-family:'times= new roman', 'new york', times, serif;font-size:16px;"><div class=3D"ydpe85= b04dyiv8446818867class">I have an RCM3900 module that has a TCP connection = with a host. The module is receiving TCP packets at about a 1-second rate. = So everything is humming along with the host sending TCP packets requesting= status info, and module responds with the data. After a some ti= me, minutes to hours, of running, the module issues 2-gratuitous ARP packet= s, about a second apart. And upon receiving the next TCP packet, the module= responds by closing the connection.</div><div class=3D"ydpe85b04dyiv844681= 8867class"><br clear=3D"none" class=3D"ydpe85b04dyiv8446818867class"></div>= <div class=3D"ydpe85b04dyiv8446818867class">Both gratuitous ARP packets hav= e the same ARP data:</div><div class=3D"ydpe85b04dyiv8446818867class"><br c= lear=3D"none" class=3D"ydpe85b04dyiv8446818867class"></div><div class=3D"yd= pe85b04dyiv8446818867class">Opcode: request (1)</div><div class=3D"ydpe85b0= 4dyiv8446818867class">Sender MAC address: 00:90:c2:f7:fd:36</div><div class= =3D"ydpe85b04dyiv8446818867class">Sender IP address:  = ; 192.168.1.64</div><div class=3D"ydpe85b04dyiv8446818867class">Targe= t MAC address: 3f:c7:01:00:b4:e5</div><div class=3D"ydpe85b04dyiv8446818867= class">Target IP address: 192.168.1.64<= /div><div class=3D"ydpe85b04dyiv8446818867class"><br clear=3D"none" class= =3D"ydpe85b04dyiv8446818867class"></div><div class=3D"ydpe85b04dyiv84468188= 67class">The target MAC doesn't appear to be valid. According to what= I read, an opcode of 1 is an ARP Probe or an ARP Announcement. If a p= robe, the sender IP and target MAC are supposed to be set to 0, and the tar= get IP set to the IP in question (to see if it's taken), and if an announce= ment, the sender IP and target IP are set to the same IP and the target MAC= is set to 0 to announce that this NIC is using this IP address. The = format of the above doesn't fit either format. Could this b= e indicating an IP conflict? <span class=3D"ydpe85b04dyiv8446818867App= le-converted-space"> </span></div><div class=3D"ydpe85b04dyiv844681886= 7class">There is no response to either message.</div><div class=3D"ydpe85b0= 4dyiv8446818867class"><br clear=3D"none" class=3D"ydpe85b04dyiv8446818867cl= ass"></div><div class=3D"ydpe85b04dyiv8446818867class"><br clear=3D"none" c= lass=3D"ydpe85b04dyiv8446818867class"></div></div><div class=3D"ydpe85b04dy= iv8446818867class" style=3D"margin:0px 0px 1em;"><br clear=3D"none" class= =3D"ydpe85b04dyiv8446818867webkit-block-placeholder"></div></div><div class= =3D"ydpe85b04dyiv8446818867class" style=3D"color:rgb(255, 255, 255);min-hei= ght:0px;"></div></div></div></div></blockquote></div></div><br clear=3D"non= e" class=3D"ydpe85b04dyiv8446818867class"></div></div> </div> =20=20=20=20=20 =20=20=20=20 <div class=3D"ydpe85b04dyiv8446818867yqt9376575824" id=3D"ydpe85b04dyiv= 8446818867yqt48812"><div style=3D"color:#fff;min-height:0;"></div></div> </div><div class=3D"ydpe85b04dyiv8446818867yqt9376575824" id=3D"ydpe85b04dy= iv8446818867yqt85630"></div></div></div> </div> </div></div></div></div></p> </div> =20=20=20=20=20 <!--~-|**|PrettyHtmlStart|**|-~--> <div style=3D"color: #fff; height: 0;">__._,_.___</div> =20=20=20=20=20=20=20=20=20=20 =20=20 =20 =20=20=20=20 <div style=3D"clear:both"> </div> <div id=3D"fromDMARC" style=3D"margin-top: 10px;"> <hr style=3D"height:2px ; border-width:0; color:#E3E3E3; background= -color:#E3E3E3;"> Posted by: Steve Trigero <seecwriter-/[email protected]> <hr st= yle=3D"height:2px ; border-width:0; color:#E3E3E3; background-color:#E3E3E3= ;"> </div> <div style=3D"clear:both"> </div> <table cellspacing=3D4px style=3D"margin-top: 10px; margin-bottom: 10px= ; color: #2D50FD;"> <tbody> <tr> <td style=3D"font-size: 12px; font-family: arial; font-weight: bo= ld; padding: 7px 5px 5px;" > <a style=3D"text-decoration: none; color: #2D50FD= " href=3D"https://groups.yahoo.com/neo/groups/rabbit-semi/conversations/mes= sages/42486;_ylc=3DX3oDMTJxODluaWlrBF9TAzk3MzU5NzE0BGdycElkAzIzMDczMTYEZ3Jw= c3BJZAMxNzA2NTU0MjA1BG1zZ0lkAzQyNDg2BHNlYwNmdHIEc2xrA3JwbHkEc3RpbWUDMTUxNTU= 1MDUwNQ--?act=3Dreply&messageNum=3D42486">Reply via web post</a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;" > <a href=3D"mailto:seecwriter-/[email protected]?subject=3DRe%3A%20%5Brab= bit-semi%5D%20Gratuitous%20ARP" style=3D"text-decoration: none; color: #2D5= 0FD;"> Reply to sender </a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;"> <a href=3D"mailto:[email protected]?subject=3DRe%3A%2= 0%5Brabbit-semi%5D%20Gratuitous%20ARP" style=3D"text-decoration: none; colo= r: #2D50FD"> Reply to group </a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;" > <a href=3D"https://groups.yahoo.com/neo/groups/rabbit-semi/conv= ersations/newtopic;_ylc=3DX3oDMTJlMmthMmZmBF9TAzk3MzU5NzE0BGdycElkAzIzMDczM= TYEZ3Jwc3BJZAMxNzA2NTU0MjA1BHNlYwNmdHIEc2xrA250cGMEc3RpbWUDMTUxNTU1MDUwNQ--= " style=3D"text-decoration: none; color: #2D50FD">Start a New Topic</a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;color: #2D50FD;" > <a href=3D"https://groups.yahoo.com/neo/groups/= rabbit-semi/conversations/topics/42484;_ylc=3DX3oDMTM2bmJsa2oxBF9TAzk3MzU5N= zE0BGdycElkAzIzMDczMTYEZ3Jwc3BJZAMxNzA2NTU0MjA1BG1zZ0lkAzQyNDg2BHNlYwNmdHIE= c2xrA3Z0cGMEc3RpbWUDMTUxNTU1MDUwNQR0cGNJZAM0MjQ4NA--" style=3D"text-decorat= ion: none; color: #2D50FD;">Messages in this topic</a> (3) </td> </tr> </tbody> </table> =20=20=20=20=20=20=20=20 <div id=3D"megaphoneModule"> <hr style=3D"height:2px ; border-width:0; color:#E3E3E3; backgr= ound-color:#E3E3E3;"> <div> <div class=3D"stream" style=3D"margin-bottom:10px;"> <div style=3D"background-color:white;"> <div class=3D"sn-img" style=3D"display:inline;"><img name=3D"tn= _file" style=3D"padding:0px 10px;vertical-align:top;margin-top:5px;" src=3D= "https://s.yimg.com/ru/static/images/yg/img/megaphone/1464031581_phpFA8bON"= height=3D"82" width=3D"82"></div> <div class=3D"mod-txt" style=3D"display:inline-block;"> <a rel=3D"nofollow" name=3D"sub_url" target=3D"_blank" href= =3D"https://yho.com/1wwmgg" style=3D"color:#0000FF;display:block;margin-lef= t:5px;text-decoration:none;"><span style=3D"font-size:15px;">Have you tried= the highest rated email app?</span></a> <div style=3D"max-width:530px;padding:2px 5px;">With 4.5 st= ars in iTunes, the Yahoo Mail app is the highest rated email app on the mar= ket. What are you waiting for? Now you can access all your inboxes (Gmail, = Outlook, AOL and more) in one place. Never delete an email again with 1000G= B of free cloud storage.</div> </div> </div> </div> </div>=20=20 =20=20=20=20=20 <hr style=3D"height:2px ; border-width:0; color:#E3E3E3; background-col= or:#E3E3E3;"> </div> <!------- Start Nav Bar ------> =20 <!-- |**|begin egp html banner|**| --> <div id=3D"ygrp-vital" style=3D"background-color: #f2f2f2; font-family: Ver= dana; font-size: 10px; margin-bottom: 10px; padding: 10px;"> <span id=3D"vithd" style=3D"font-weight: bold; color: #333; text-transf= orm: uppercase; "><a href=3D"https://groups.yahoo.com/neo/groups/rabbit-sem= i/info;_ylc=3DX3oDMTJlZjhtaGFzBF9TAzk3MzU5NzE0BGdycElkAzIzMDczMTYEZ3Jwc3BJZ= AMxNzA2NTU0MjA1BHNlYwN2dGwEc2xrA3ZnaHAEc3RpbWUDMTUxNTU1MDUwNQ--" style=3D"t= ext-decoration: none;">Visit Your Group</a></span> <ul style=3D"list-style-type: none; margin: 0; padding: 0; display: in= line;"> </ul> </div> <div id=3D"ft" style=3D"font-family: Arial; font-size: 11px; margin-top: 5p= x; padding: 0 2px 0 0; clear: both;"> <a href=3D"https://groups.yahoo.com/neo;_ylc=3DX3oDMTJkMjA5ajZiBF9TAzk3ND= c2NTkwBGdycElkAzIzMDczMTYEZ3Jwc3BJZAMxNzA2NTU0MjA1BHNlYwNmdHIEc2xrA2dmcARzd= GltZQMxNTE1NTUwNTA1" style=3D"float: left;"><img src=3D"http://l.yimg.com/r= u/static/images/yg/img/email/new_logo/logo-groups-137x15.png" height=3D"15"= width=3D"137" alt=3D"Yahoo! Groups" style=3D"border: 0;"/></a> <div style=3D"color: #747575; float: right;"> • <a href=3D"https://i= nfo.yahoo.com/privacy/us/yahoo/groups/details.html" style=3D"text-decoratio= n: none;">Privacy</a> • <a href=3D"mailto:rabbit-semi-unsubscribe@yaho= ogroups.com?subject=3DUnsubscribe" style=3D"text-decoration: none;">Unsubsc= ribe</a> • <a href=3D"https://info.yahoo.com/legal/us/yahoo/utos/terms= /" style=3D"text-decoration: none;">Terms of Use</a> </div> </div> <br> <!-- |**|end egp html banner|**| --> </div> <!-- ygrp-msg --> =20 <!-- Sponsor --> <!-- |**|begin egp html banner|**| --> <div id=3D"ygrp-sponsor" style=3D"width:160px; float:right; clear:none; m= argin:0 0 25px 0; background: #fff;"> <!-- Start Recommendations --> <div id=3D"ygrp-reco"> </div> <!-- End Recommendations --> </div> <!-- |**|end egp html banner|**| --> <div style=3D"clear:both; color: #FFF; font-size:1px;">.</div> </div> <img src=3D"http://geo.yahoo.com/serv?s=3D97359714/grpId=3D2307316/grpspI= d=3D1706554205/msgId=3D42486/stime=3D1515550505" width=3D"1" height=3D"1"> = <br> <img src=3D"http://y.analytics.yahoo.com/fpc.pl?ywarid=3D515FB27823A7407E&a= =3D10001310322279&js=3Dno&resp=3Dimg&cf12=3DCP" width=3D"1" height=3D"1">=20 <div style=3D"color: #fff; height: 0;">__,_._,___</div> <!--~-|**|PrettyHtmlEnd|**|-~--> </body> <!--~-|**|PrettyHtmlStart|**|-~--> <head> <style type=3D"text/css"> <!-- #ygrp-mkp { border: 1px solid #d8d8d8; font-family: Arial; margin: 10px 0; padding: 0 10px; } #ygrp-mkp hr { border: 1px solid #d8d8d8; } #ygrp-mkp #hd { color: #628c2a; font-size: 85%; font-weight: 700; line-height: 122%; margin: 10px 0; } #ygrp-mkp #ads { margin-bottom: 10px; } #ygrp-mkp .ad { padding: 0 0; } #ygrp-mkp .ad p { margin: 0; } #ygrp-mkp .ad a { color: #0000ff; text-decoration: none; } #ygrp-sponsor #ygrp-lc { font-family: Arial; } #ygrp-sponsor #ygrp-lc #hd { margin: 10px 0px; font-weight: 700; font-size: 78%; line-height: 122%; } #ygrp-sponsor #ygrp-lc .ad { margin-bottom: 10px; padding: 0 0; } #actions { font-family: Verdana; font-size: 11px; padding: 10px 0; } #activity { background-color: #e0ecee; float: left; font-family: Verdana; font-size: 10px; padding: 10px; } #activity span { font-weight: 700; } #activity span:first-child { text-transform: uppercase; } #activity span a { color: #5085b6; text-decoration: none; } #activity span span { color: #ff7900; } #activity span .underline { text-decoration: underline; } .attach { clear: both; display: table; font-family: Arial; font-size: 12px; padding: 10px 0; width: 400px; } .attach div a { text-decoration: none; } .attach img { border: none; padding-right: 5px; } .attach label { display: block; margin-bottom: 5px; } .attach label a { text-decoration: none; } =20=20 blockquote { margin: 0 0 0 4px; } .bold { font-family: Arial; font-size: 13px; font-weight: 700; } .bold a { text-decoration: none; } dd.last p a { font-family: Verdana; font-weight: 700; } dd.last p span { margin-right: 10px; font-family: Verdana; font-weight: 700; } dd.last p span.yshortcuts { margin-right: 0; } div.attach-table div div a { text-decoration: none; } div.attach-table { width: 400px; } div.file-title a, div.file-title a:active, div.file-title a:hover, div.fi= le-title a:visited { text-decoration: none; } div.photo-title a, div.photo-title a:active, div.photo-title a:hover, div= ..photo-title a:visited { text-decoration: none; } div#ygrp-mlmsg #ygrp-msg p a span.yshortcuts { font-family: Verdana; font-size: 10px; font-weight: normal; } .green { color: #628c2a; } .MsoNormal { margin: 0 0 0 0; } o { font-size: 0; } #photos div { float: left; width: 72px; } #photos div div { border: 1px solid #666666; height: 62px; overflow: hidden; width: 62px; } #photos div label { color: #666666; font-size: 10px; overflow: hidden; text-align: center; white-space: nowrap; width: 64px; } #reco-category { font-size: 77%; } #reco-desc { font-size: 77%; } .replbq { margin: 4px; } #ygrp-actbar div a:first-child { /* border-right: 0px solid #000;*/ margin-right: 2px; padding-right: 5px; } #ygrp-mlmsg { font-size: 13px; font-family: Arial, helvetica,clean, sans-serif; *font-size: small; *font: x-small; } #ygrp-mlmsg table { font-size: inherit; font: 100%; } #ygrp-mlmsg select, input, textarea { font: 99% Arial, Helvetica, clean, sans-serif; } #ygrp-mlmsg pre, code { font:115% monospace; *font-size:100%; } #ygrp-mlmsg * { line-height: 1.22em; } #ygrp-mlmsg #logo { padding-bottom: 10px; } #ygrp-msg p a { font-family: Verdana; } #ygrp-msg p#attach-count span { color: #1E66AE; font-weight: 700; } #ygrp-reco #reco-head { color: #ff7900; font-weight: 700; } #ygrp-reco { margin-bottom: 20px; padding: 0px; } #ygrp-sponsor #ov li a { font-size: 130%; text-decoration: none; } #ygrp-sponsor #ov li { font-size: 77%; list-style-type: square; padding: 6px 0; }=20 #ygrp-sponsor #ov ul { margin: 0; padding: 0 0 0 8px; } #ygrp-text { font-family: Georgia; } #ygrp-text p { margin: 0 0 1em 0; } #ygrp-text tt { font-size: 120%; } #ygrp-vital ul li:last-child { border-right: none !important;=20 }=20 --> </style> </head> <!--~-|**|PrettyHtmlEnd|**|-~--> </html> <!-- end group email --> ------=_Part_86560_655690901.1515550470008--