We're finding weirdness with the traceroutes on various OS's and sites about teh Us and outside the US similair to the first poster on the issue:
North Carolina: Linux: 5 POS1-2.BR4.DCA6.ALTER.NET (204.255.169.129) 150.016 ms 139.964 ms 139.527 ms 6 0.so-1-0-0.XL1.DCA6.ALTER.NET (152.63.41.230) 150.741 ms 180.599 ms 157.162 ms 7 0.so-0-0-0.XR1.DCA6.ALTER.NET (152.63.35.113) 140.307 ms 152.391 ms 147.236 ms 8 0.so-3-0-0.TR1.DCA6.ALTER.NET (152.63.11.97) 150.651 ms 209.946 ms 149.68 ms 9 121.at-5-2-0.TR1.NYC8.ALTER.NET (152.63.2.166) 160.602 ms 149.833 ms 169.714 ms 10 185.at-1-0-0.XR1.NYC8.ALTER.NET (152.63.19.185) 140.591 ms 139.952 ms 149.691 ms 11 183.ATM6-0.GW1.NYC8.ALTER.NET (152.63.18.137) 140.64 ms 150.009 ms 139.64 ms 12 circle-gw.customer.alter.net (157.130.49.6) 160.647 ms 160.279 ms 160.402 ms 13 * 192.216.122.214 (192.216.122.214) 180.906 ms 179.967 ms 14 205.229.56.205 (205.229.56.205) 159.541 ms 159.977 ms 159.792 ms 15 * 205.229.56.205 (205.229.56.205) 180.647 ms * 16 205.229.56.205 (205.229.56.205) 190.666 ms 180.003 ms 179.67 ms 17 205.229.56.205 (205.229.56.205) 199.683 ms * 180.86 ms 18 205.229.56.205 (205.229.56.205) 179.61 ms 189.936 ms 189.83 ms openBSD: 6 POS1-2.BR4.DCA6.ALTER.NET (204.255.169.129) 136.596 ms 147.230 ms 168.604 ms 7 0.so-1-0-0.XL1.DCA6.ALTER.NET (152.63.41.230) 146.790 ms 155.243 ms 168.232 ms 8 0.so-0-0-0.XR1.DCA6.ALTER.NET (152.63.35.113) 156.500 ms 137.161 ms 128.50 ms 9 0.so-3-0-0.TR1.DCA6.ALTER.NET (152.63.11.97) 156.726 ms 157.886 ms 148.11 ms 10 121.at-5-2-0.TR1.NYC8.ALTER.NET (152.63.2.166) 166.246 ms 135.97 ms 168.139 ms 11 185.at-1-0-0.XR1.NYC8.ALTER.NET (152.63.19.185) 156.660 ms 136.919 ms 148.189 ms 12 183.ATM6-0.GW1.NYC8.ALTER.NET (152.63.18.137) 137.684 ms 157.144 ms 158.155 ms 13 circle-gw.customer.alter.net (157.130.49.6) 146.641 ms 157.30 ms 148.175 ms 14 192.216.122.214 (192.216.122.214) 176.679 ms * 166.510 ms 15 205.229.56.205 (205.229.56.205) 157.532 ms 157.91 ms 158.247 ms 16 * * * 17 205.229.56.205 (205.229.56.205) 174.641 ms 187.251 ms 178.38 ms 18 205.229.56.205 (205.229.56.205) 186.753 ms * 196.130 ms 19 205.229.56.205 (205.229.56.205) 196.214 ms 187.169 ms 166.296 ms Minnesota: SUNOS: 3 chi-core-01.inet.qwest.net (205.171.20.37) 11 ms 12 ms 11 ms 4 jfk-core-02.inet.qwest.net (205.171.5.11) 31 ms 31 ms 31 ms 5 jfk-brdr-02.inet.qwest.net (205.171.230.21) 31 ms 31 ms 31 ms 6 205.171.4.10 (205.171.4.10) 32 ms 32 ms 32 ms 7 526.at-5-0-0.XR2.NYC8.ALTER.NET (152.63.23.78) 33 ms 33 ms 33 ms 8 182.ATM7-0.GW1.NYC8.ALTER.NET (152.63.18.149) 33 ms 33 ms 33 ms 9 157.130.49.6 (157.130.49.6) 39 ms 41 ms 41 ms 10 192.216.122.214 (192.216.122.214) 51 ms * 43 ms 11 205.229.56.205 (205.229.56.205) 43 ms 43 ms 42 ms 12 * * * 13 205.229.56.205 (205.229.56.205) 128 ms 67 ms 63 ms 14 205.229.56.205 (205.229.56.205) 66 ms * 573 ms 15 205.229.56.205 (205.229.56.205) 67 ms 63 ms 169 ms Texas: FreeBSD: 4 500.POS3-0.GW5.DFW9.ALTER.NET (157.130.155.233) 6.773 ms 5.344 ms 5.637 ms 5 130.at-5-0-0.XR2.DFW9.ALTER.NET (152.63.100.46) 5.680 ms 5.322 ms 5.938 ms 6 184.at-2-1-0.TR2.DFW9.ALTER.NET (152.63.98.54) 5.975 ms 5.710 ms 6.004 ms 7 128.at-5-1-0.TR2.NYC8.ALTER.NET (152.63.4.6) 47.071 ms 48.556 ms 48.754 ms 8 284.at-1-1-0.XR2.NYC8.ALTER.NET (152.63.19.205) 48.238 ms 47.631 ms 47.915 ms 9 182.ATM7-0.GW1.NYC8.ALTER.NET (152.63.18.149) 47.892 ms 48.285 ms 47.517 ms 10 circle-gw.customer.alter.net (157.130.49.6) 51.102 ms 53.634 ms 49.705 ms11 192.216.122.214 (192.216.122.214) 64.805 ms * 56.177 ms 12 205.229.56.205 (205.229.56.205) 52.772 ms 52.019 ms 53.142 ms 13 205.229.56.205 (205.229.56.205) 67.160 ms * * 14 205.229.56.205 (205.229.56.205) 77.622 ms 77.550 ms 79.201 ms 15 205.229.56.205 (205.229.56.205) 75.565 ms * 76.961 ms 16 205.229.56.205 (205.229.56.205) 75.968 ms 75.197 ms 77.047 ms We'd hoped to test from norway, but admins with less then a clue on system maintainance prohibit traceroute. Thanks, Ron DuFresne On Tue, 8 Jan 2002, Jim Watt wrote: > --On 01/09/2002 9:38 AM +1100 Martin wrote: > > } there is something wrong with that host. > } > } have a look at line 11, you have already traced to the host but the > } traceroute doesn't stop. i would say they are filtering IP packets, probably > } ICMP as well. > } > > OK, since we're comparing traceroute results... :-) > > This one's from a FreeBSD 3.x system. I cut out the hops before > UUNET: > > traceroute to 205.229.56.205 (205.229.56.205): 1-30 hops, 38 byte packets > [...] > 4 500.Serial2-2.GW3.PAO1.ALTER.NET (157.130.190.5) 22.2 ms 19.5 ms 18.3 ms > 5 506.ATM3-0.XR1.PAO1.ALTER.NET (152.63.53.82) 20.1 ms 18.3 ms 16.2 ms > 6 189.at-1-1-0.TR1.SAC1.ALTER.NET (152.63.50.94) 23.9 ms (ttl=249!) 23.1 ms > (ttl=249!) 23.0 ms (ttl=249!) > 7 127.at-6-3-0.TR1.NYC8.ALTER.NET (152.63.5.233) 107 ms (ttl=248!) 105 ms > (ttl=248!) 105 ms (ttl=248!) > 8 185.at-1-0-0.XR1.NYC8.ALTER.NET (152.63.19.185) 106 ms (ttl=247!) 106 ms > (ttl=247!) 104 ms (ttl=247!) > 9 183.ATM6-0.GW1.NYC8.ALTER.NET (152.63.18.137) 97.6 ms 97.1 ms 96.9 ms > 10 circle-gw.customer.alter.net (157.130.49.6) 104 ms (ttl=240!) 101 ms > (ttl=240!) 101 ms (ttl=240!) > 11 192.216.122.214 (192.216.122.214) 106 ms (ttl=239!) * 103 ms (ttl=239!) > 12 205.229.56.205 (205.229.56.205) 110 ms (ttl=238!) !A 112 ms (ttl=238!) !A > 110 ms (ttl=238!) !A > > So from that machine, I get a nice, clean "Administratively Prohibited" > return at the machine's IP address. > > The variations make it kind of hard to know what's actually happening. > > I wonder if we're seeing differences in what kind of ICMP replies are > actually making it back to traceroute. > > Jim > -- > Jim Watt [EMAIL PROTECTED] > Applied Biosystems Voice (desk): +1 408 577 2228 > 3833 North First Street Fax: +1 408 894 9307 > San Jose CA 95134-1701 Voice (main): +1 408 577 2200 > > _______________________________________________ > Firewalls mailing list > [EMAIL PROTECTED] > http://lists.gnac.net/mailman/listinfo/firewalls > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything. _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
