McAfee/ATT Issue
We are seeing intermittent connectivity issues via ATT to McAfee's Update service network (208.69.152.0/21). Attempts to contact McAfee Support and ATT support have gotten standard responses. If there is a McAfee Net Admin on list, maybe you can initiate a ticket with ATT? We've got several downstream customers that are being affected by the issue. 3 3 ms 3 ms 2 ms iodc-69-71-48-2.ioconnect.net [69.71.48.2] 4 3 ms 3 ms 3 ms 12.89.121.177 526 ms25 ms25 ms cr1.phmaz.ip.att.net [12.123.206.138] 626 ms25 ms25 ms cr1.dlstx.ip.att.net [12.122.28.181] 726 ms26 ms27 ms tbr1.dlstx.ip.att.net [12.122.18.138] 825 ms25 ms25 ms gar4.dlstx.ip.att.net [12.123.16.97] 9 212 ms 200 ms * 12.118.225.22 Problem occurring here. Sometimes traffic gets through, sometimes it doesn't 10 29 ms26 ms26 ms 216.143.71.219 11 26 ms26 ms26 ms www.mcafeeasap.com [208.69.153.135] Thanks, Matt Calhoun i/o Data Centers
Re: McAfee/ATT Issue
Calhoun, Matthew wrote: 9 212 ms 200 ms * 12.118.225.22 Problem occurring here. Sometimes traffic gets through, sometimes it doesn't 10 29 ms26 ms26 ms 216.143.71.219 11 26 ms26 ms26 ms www.mcafeeasap.com [208.69.153.135] Looks a lot like that hop is rate-limiting ICMP to itself. Everything beyond it seems to be good from the looks of it. -Kam
RE: McAfee/ATT Issue
We've also seen that busy routers are slower to respond to requests directed at them as opposed to traffic routing thru them which can continue to work without issue or performance loss. -Original Message- From: Kameron Gasso [mailto:kgasso-li...@visp.net] Sent: Wednesday, February 18, 2009 12:03 PM To: Calhoun, Matthew Cc: NANOG list Subject: Re: McAfee/ATT Issue Calhoun, Matthew wrote: 9 212 ms 200 ms * 12.118.225.22 Problem occurring here. Sometimes traffic gets through, sometimes it doesn't 10 29 ms26 ms26 ms 216.143.71.219 11 26 ms26 ms26 ms www.mcafeeasap.com [208.69.153.135] Looks a lot like that hop is rate-limiting ICMP to itself. Everything beyond it seems to be good from the looks of it. -Kam
RE: McAfee/ATT Issue
While I agree with all of your assessments, this traceroute was being provided to illustrate where traffic *appears* to be stopping when we are seeing the issue. It's intermittent, so some times we can reach the destination hosts (via HTTP, HTTPS, etc.) and sometimes we can't. When we can reach the destination hosts (via HTTP), the traceroute completes When we can't reach the destination hosts (via HTTP), the traceroute won't complete and the last hop is the host that I indicated in my previous post (12.118.225.22) Thanks, Matt -Original Message- From: Justin Krejci [mailto:jkre...@usinternet.com] Sent: Wednesday, February 18, 2009 11:15 AM To: kga...@visp.net; Calhoun, Matthew Cc: 'NANOG list' Subject: RE: McAfee/ATT Issue We've also seen that busy routers are slower to respond to requests directed at them as opposed to traffic routing thru them which can continue to work without issue or performance loss. -Original Message- From: Kameron Gasso [mailto:kgasso-li...@visp.net] Sent: Wednesday, February 18, 2009 12:03 PM To: Calhoun, Matthew Cc: NANOG list Subject: Re: McAfee/ATT Issue Calhoun, Matthew wrote: 9 212 ms 200 ms * 12.118.225.22 Problem occurring here. Sometimes traffic gets through, sometimes it doesn't 10 29 ms26 ms26 ms 216.143.71.219 11 26 ms26 ms26 ms www.mcafeeasap.com [208.69.153.135] Looks a lot like that hop is rate-limiting ICMP to itself. Everything beyond it seems to be good from the looks of it. -Kam
RE: McAfee/ATT Issue
--- mcalh...@iodatacenters.com wrote: From: Calhoun, Matthew mcalh...@iodatacenters.com While I agree with all of your assessments, this traceroute was being provided to illustrate where traffic *appears* to be stopping when we are seeing the issue. It's intermittent, so some times we can reach the destination hosts (via HTTP, HTTPS, etc.) and sometimes we can't. When we can reach the destination hosts (via HTTP), the traceroute completes When we can't reach the destination hosts (via HTTP), the traceroute won't complete and the last hop is the host that I indicated in my previous post (12.118.225.22) - It may be best to use tcptraceroute when it is and when it isn't working. It may help you evaluate where the trouble is occurring more efficiently. scott