Ok here's the scoop on the Windows tracert issue.
1. The original Unix (real) traceroute uses UDP. This works fine.
2. Windows tracert uses ICMP rather than UDP. This no longer works correctly.
3. The problem has to due with two things that interacted with each other:
1. New code added to the system to make NetBIOS operate
better with the firewall. Part of this code had to do with
closing certain ports faster. ICMP packets got included in
this code.
2. ICMP Time Exceeded response packet would cause connections to
be closed. (Normally this wasn't much of a problem since the
time-out grace period would be honored.)
So with ICMP packets included in the fast close code and ICMP
Time Exceeded response packets closing the connection down;
the result was the ICMP Time Exceeded packets sent back to the
Windows tracert would not return because the connection was
closed down. Actually with Windows tracert due to this interaction
every other ICMP packet is dropped.
4. Resolution.
1. ICMP packets are excluded from the fast close code.
2. ICMP Time Exceeded response packets don't cause a connection to close.
5. This fix will appear in version 3.2.2 scheduled for release at the
beginning of December.
Paul
>--------------------- Attention -----------------------------
>A digest version of this list is now available.
>Send email to [EMAIL PROTECTED], with the following message:
>subscribe gb-users-digest your_email_address
>Then unsubscribe from this list.
>-------------------------------------------------------------
>GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi
>Send postings to: [EMAIL PROTECTED]
>Access the list archives at: http://www.gnatbox.com/gb-users/
>-------------------------------------------------------------
>Just for the record I am also running IE 5.5 SP2. Netscape works
>fine. It is something very strange and I have talked to several other
>people who are having the same problem. Some people have it some
>people don't...but it is definitely on GTA's side.
>
>The tracert thing I am sure has something to do with win32 tracert
>using UDP and 3.2.1s new icmp limiting. However, it worked fine in
>3.2.0
>
>I came upon this when customers were telling me they were getting time
>outs. It wasn't until I tested behind several 3.2.1 and earlier
>versions before I found that it was specific to win32 tracert and
>3.2.1
>
>On Tue, 28 Aug 2001 09:19:14 -0400, you wrote:
>
>>--------------------- Attention -----------------------------
>>A digest version of this list is now available.
>>Send email to [EMAIL PROTECTED], with the following message:
>>subscribe gb-users-digest your_email_address
>>Then unsubscribe from this list.
>>-------------------------------------------------------------
>>GNAT Box User Forum http://www.gnatbox.com/cgi-bin/Ultimate.cgi
>>Send postings to: [EMAIL PROTECTED]
>>Access the list archives at: http://www.gnatbox.com/gb-users/
> >-------------------------------------------------------------
> >Hi,
> >
> >I have Gnatbox 3.2.1.
> >
> >
> >> -----Original Message-----
> >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
>>> [EMAIL PROTECTED]
>>> Sent: Tuesday, August 28, 2001 1:39 AM
>>> To: [EMAIL PROTECTED]
>>> Subject: 2 really annoying things
>>>
>>> -------------------------------------------------------------
>>> ok 2 really annoying things since the 3.2.1 upgrade (one isn't related
>>> to the upgrade).
>>>
>>>
>>> Try to tracert (win32) to anything from behind the gnatbox...the
>>> second ping always times out.
>>
>>
>>I never noticed this before because I don't use tracert but you are
>>correct - the second ping always times out (except for the very last hop). I
>>always use traceroute from one of my Linux boxes which has no such problem
>>and is a _lot_ faster than win32 tracert.
>>
>>
>>>
>>> The support center has major issues. I am constantly having a hard
>>> time logging in with IE. I have talked to several people with the
>>> exact same problem...once you click continue to login it just pops
> >> back with blank User ID and Password field over and over. This is a
>>> GTA problem with how that site interacts with IE. All other SSL sites
>>> work fine. Hopefully, GTA will get this fixed since they want to push
>>> everyone to use the support center now.
>>
>>
>>I'm currently using IE 5.5 SP2 and have no problems logging into the Support
>>Center. I don't remember having any problems with earlier versions of IE
>>either, but then I don't recall what version I had when I first signed up.
>>
>>>
>>> If you are reading this GTA you may want to look at fixing the tracert
>>> issue as well.
>>
>>----------------------------------------------
>>To Unsubscribe: send mail to [EMAIL PROTECTED]
>>with "unsubscribe gb-users your_email_address
>>in the body of the message
>
>----------------------------------------------
>To Unsubscribe: send mail to [EMAIL PROTECTED]
>with "unsubscribe gb-users your_email_address
>in the body of the message
--
----------------------------------------------------------------------------
Paul Emerson Tel: +1.407.380.0220 x1106
Global Technology Associates, Inc. Fax: +1.407.380.6080
3505 Lake Lynda Drive Mobile: +1.407.310.8563
Suite 109 Email: [EMAIL PROTECTED]
Orlando, Florida 32817 USA Web: http://www.gta.com
Mobile Email: [EMAIL PROTECTED]
----------------------------------------------------------------------------
