what I have seen isn't that the packet is actually bouncing around, just
that the ICMP response fo the packet expiration will arrive from either
the same router or sometimes two different (but adjacent) routers.
David Lang
On Thu,
15 Feb 2001, David Ishmael wrote:
> Date: Thu, 15 Feb 2001 16:20:11 -0500
> From: David Ishmael <[EMAIL PROTECTED]>
> To: 'David Lang' <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED], [EMAIL PROTECTED],
> [EMAIL PROTECTED], [EMAIL PROTECTED],
> [EMAIL PROTECTED]
> Subject: RE:
>
> I've never seen a packet bounce between routers due to a filter. As a
> matter-o-fact, even if the host was down the router shouldn't pass the
> packet back. In most cases a router only passes a packet back when it
> doesn't know how to get to the network the host is on and the router has a
> default gateway pointing back to the router that sent the packet to him.
>
> Just to make sure I'm right, I asked one of our CCIE routing bubbas and he
> basically agreed with me. I may only have a CCNA but I know my routing.
>
> David Ishmael, CCNA, IVCP
> Senior Network Management Engineer
> Windward Consulting Group, Inc.
> Phone: (703) 283-7564
> Pager: (888) 910-7094
> eFax: (425) 969-4707
> Fax: (703) 351-9428
> mailto:[EMAIL PROTECTED]
> mailto:[EMAIL PROTECTED]
>
>
>
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of David Lang
> Sent: Thursday, February 15, 2001 1:32 PM
> To: David Ishmael
> Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PROTECTED]; [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: RE:
>
>
> this type of traceroute can also result from a router that blocks the
> traceroute packets. if this is the case you can still get to the machine
> even though traceroute never finishes.
>
> David Lang
>
> On Thu, 15 Feb 2001, David Ishmael
> wrote:
>
> > Date: Thu, 15 Feb 2001 11:02:11 -0500
> > From: David Ishmael <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED], [EMAIL PROTECTED]
> > Cc: [EMAIL PROTECTED], [EMAIL PROTECTED],
> > [EMAIL PROTECTED]
> > Subject: RE:
> >
> > hahahaha, routing loop. Courtesy call the ISP and let em know they
> screwed
> > up a route between 211.103.56.1 and 211.103.56.2. I always love seeing
> > stuff like that...job security.
> >
> > David Ishmael, CCNA, IVCP
> > Senior Network Management Engineer
> > Windward Consulting Group, Inc.
> > Phone: (703) 283-7564
> > Pager: (888) 910-7094
> > eFax: (425) 969-4707
> > Fax: (703) 351-9428
> > mailto:[EMAIL PROTECTED]
> > mailto:[EMAIL PROTECTED]
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of
> > [EMAIL PROTECTED]
> > Sent: Wednesday, February 14, 2001 12:44 PM
> > To: [EMAIL PROTECTED]
> > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
> > [EMAIL PROTECTED]
> > Subject:
> >
> >
> > I recently ran a tracert on a IP that had been scanning some of the
> systems
> > I am
> > responsible for and received some strange results.
> > I was wondering if any of you could shed some light on this Issue.
> >
> > -------------------------------------------------------------------------
> > From a Windows system:
> > Tracing route to 211.103.59.95 over a maximum of 30 hops
> > 1 ...
> > 2 ...
> > 3 ...
> > 4 ...
> > 5 ...
> > 6 ...
> > 7 ....
> > 8 <10 ms <10 ms <10 ms 195.at-0-0-0.TR1.DCA8.ALTER.NET
> > [152.63.32.158]
> > 9 63 ms 94 ms 78 ms 115.at-6-1-0.TR3.SCL1.ALTER.NET
> > [152.63.3.194]
> > 10 78 ms 78 ms 78 ms 399.ATM6-0.XR1.PAO1.ALTER.NET
> [152.63.48.217]
> > 11 63 ms 78 ms 78 ms 189.ATM5-0.GW7.PAO1.ALTER.NET
> [152.63.49.153]
> > 12 62 ms 78 ms 94 ms hkt-gw2.customer.ALTER.NET
> [157.130.197.190]
> > 13 63 ms 79 ms 93 ms g1-0.paix04.hkt.net [202.84.128.172]
> > 14 1313 ms 1297 ms 1296 ms p5-0.yckbr03.hkt.net [202.84.128.221]
> > 15 1266 ms 1297 ms 1265 ms 202.84.140.1
> > 16 1265 ms 1282 ms 1265 ms pos7-0.tmhstcbr01.hkt.net [207.176.97.129]
> > 17 1266 ms 1265 ms 1344 ms 207.176.96.68
> > 18 1359 ms 1359 ms 1375 ms 207.176.98.38
> > 19 1485 ms 1375 ms 1375 ms 211.103.6.146
> > 20 1391 ms 1375 ms 1421 ms 211.103.56.2
> > 21 1375 ms 1375 ms 1360 ms 211.103.56.1
> > 22 1360 ms 1390 ms 1344 ms 211.103.56.2
> > 23 1328 ms 1328 ms 1375 ms 211.103.56.1
> > 24 1406 ms 1407 ms 1406 ms 211.103.56.2
> > 25 1422 ms 1453 ms 1484 ms 211.103.56.1
> > 26 1312 ms 1281 ms 1219 ms 211.103.56.2
> > 27 1157 ms 1140 ms 1141 ms 211.103.56.1
> > 28 1141 ms 1125 ms 1109 ms 211.103.56.2
> > 29 1125 ms 1125 ms 1110 ms 211.103.56.1
> > 30 1203 ms 1188 ms 1187 ms 211.103.56.2
> >
> > --------------------------------------------------------------------------
> --
> > ----------
> > Brett J. Carpenter
> >
> >
> >
> > ---------------------------------------------
> > This message was sent using Voicenet WebMail.
> > http://www.voicenet.com/webmail/
> >
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> >
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
