Date: Thu, 3 Apr 2003 15:08:52 +1000 From: Christopher Smith <csmith@its.uq.edu.au> To: freebsd-questions@freebsd.org Subject: Weird traceroute problem Message-ID: <5C9140FE-6592-11D7-BABB-000502F96668@its.uq.edu.au>
next in thread | raw e-mail | index | archive | help
Ok, I'm sure I'm missing something really simple and obvious here, but
I'm stuck.
I have two firewalls - the second is being prepped to replace the
first. All networking from the second machine appears to be fine
*except* traceroute looks broken. This happens:
(machine that works)
mr2fw2# traceroute 130.102.2.15
traceroute to 130.102.2.15 (130.102.2.15), 64 hops max, 40 byte packets
1 beak-fw (130.102.1.67) 0.802 ms 0.639 ms 0.567 ms
2 zeus-beak (130.102.1.91) 0.484 ms 0.373 ms 0.367 ms
3 feather-zeus (130.102.1.81) 0.911 ms 0.523 ms 0.538 ms
4 krefti.cc.uq.edu.au (130.102.2.15) 0.386 ms 0.311 ms 0.425 ms
mr2fw2#
(machine that doesn't)
rock# traceroute 130.102.2.15
traceroute to 130.102.2.15 (130.102.2.15), 64 hops max, 44 byte packets
1 * * *
2 * * *
3 * * *
4 krefti.cc.uq.edu.au (130.102.2.15) 0.311 ms 0.329 ms 0.257 ms
rock#
Traceroute *from* the target machine (130.102.2.15) to the non-working
machine works fine. The networking guys assure me there are no filters
on the router that might be causing problems.
The machine that works is running 4.6.2p2.
The machine that doesn't is running 4.8-RELEASE
Any ideas ?
Other info that might be relevant:
(machine that works)
netstat -nr:
Internet:
Destination Gateway Flags Refs Use Netif
Expire
default 130.102.1.67 UGSc 2 114 vlan0
127.0.0.1 127.0.0.1 UH 0 0 lo0
130.102.1.64/28 link#3 UC 1 0 vlan0
130.102.1.67 0.d0.0.db.f8.0 UHLW 3 0 vlan0
1198
ifconfig vlan0:
vlan0: flags=9843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,MULTICAST> mtu 1500
inet 130.102.1.68 netmask 0xfffffff0 broadcast 130.102.1.79
inet6 fe80::206:5bff:fe8f:4390%vlan0 prefixlen 64 scopeid 0x3
ether 00:06:5b:8f:43:90
media: Ethernet autoselect (1000baseTX <full-duplex>)
status: active
vlan: 366 parent interface: bge0
tcpdump of a successful traceroute:
15:03:17.134503 130.102.1.71.54793 > 130.102.2.15.33435: udp 12 [ttl 1]
15:03:17.135310 130.102.1.71.54793 > 130.102.2.15.33436: udp 12 [ttl 1]
15:03:17.135837 130.102.1.71.54793 > 130.102.2.15.33437: udp 12 [ttl 1]
15:03:17.136613 130.102.1.71.54793 > 130.102.2.15.33438: udp 12
15:03:17.137084 130.102.1.71.54793 > 130.102.2.15.33439: udp 12
15:03:17.137427 130.102.1.71.54793 > 130.102.2.15.33440: udp 12
15:03:17.138053 130.102.1.71.54793 > 130.102.2.15.33441: udp 12
15:03:17.138820 130.102.1.71.54793 > 130.102.2.15.33442: udp 12
15:03:17.139376 130.102.1.71.54793 > 130.102.2.15.33443: udp 12
15:03:17.140625 130.102.1.71.54793 > 130.102.2.15.33444: udp 12
15:03:17.141021 130.102.2.15 > 130.102.1.71: icmp: 130.102.2.15 udp
port 33444 unreachable
15:03:17.141352 130.102.1.71.54793 > 130.102.2.15.33445: udp 12
15:03:17.141611 130.102.2.15 > 130.102.1.71: icmp: 130.102.2.15 udp
port 33445 unreachable
15:03:17.141904 130.102.1.71.54793 > 130.102.2.15.33446: udp 12
15:03:17.142196 130.102.2.15 > 130.102.1.71: icmp: 130.102.2.15 udp
port 33446 unreachable
(machine that doesn't)
Destination Gateway Flags Refs Use Netif
Expire
default 130.102.1.67 UGSc 52 -1293793694 vlan0
127.0.0.1 127.0.0.1 UH 0 623179 lo0
130.102.1.64/28 link#5 UC 3 0 vlan0
130.102.1.67 0.d0.0.db.f8.0 UHLW 51 30 vlan0
1180
ifconfig vlan0:
vlan0: flags=9843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,MULTICAST> mtu 1500
inet 130.102.1.71 netmask 0xfffffff0 broadcast 130.102.1.79
inet 130.102.1.74 netmask 0xffffffff broadcast 130.102.1.74
inet 130.102.1.75 netmask 0xffffffff broadcast 130.102.1.75
inet 130.102.1.76 netmask 0xffffffff broadcast 130.102.1.76
inet 130.102.1.73 netmask 0xffffffff broadcast 130.102.1.73
inet 130.102.1.78 netmask 0xffffffff broadcast 130.102.1.78
ether 00:a0:cc:73:48:2c
vlan: 366 parent interface: ti0
tcpdump of an attempted traceroute:
15:05:58.806352 130.102.1.69.34304 > 130.102.2.15.33435: [no cksum] udp
16 [ttl 1] (id 34305, len 44)
15:06:03.807616 130.102.1.69.34304 > 130.102.2.15.33436: [no cksum] udp
16 [ttl 1] (id 34306, len 44)
15:06:08.817647 130.102.1.69.34304 > 130.102.2.15.33437: [no cksum] udp
16 [ttl 1] (id 34307, len 44)
15:06:13.827789 130.102.1.69.34304 > 130.102.2.15.33438: [no cksum] udp
16 (ttl 2, id 34308, len 44)
15:06:18.837804 130.102.1.69.34304 > 130.102.2.15.33439: [no cksum] udp
16 (ttl 2, id 34309, len 44)
15:06:23.847896 130.102.1.69.34304 > 130.102.2.15.33440: [no cksum] udp
16 (ttl 2, id 34310, len 44)
15:06:28.857986 130.102.1.69.34304 > 130.102.2.15.33441: [no cksum] udp
16 (ttl 3, id 34311, len 44)
15:06:33.868034 130.102.1.69.34304 > 130.102.2.15.33442: [no cksum] udp
16 (ttl 3, id 34312, len 44)
15:06:38.878104 130.102.1.69.34304 > 130.102.2.15.33443: [no cksum] udp
16 (ttl 3, id 34313, len 44)
15:06:43.888194 130.102.1.69.34304 > 130.102.2.15.33444: [no cksum] udp
16 (ttl 4, id 34314, len 44)
15:06:43.888610 130.102.2.15 > 130.102.1.69: icmp: 130.102.2.15 udp
port 33444 unreachable (ttl 61, id 23355, len 56)
15:06:43.888734 130.102.1.69.34304 > 130.102.2.15.33445: [no cksum] udp
16 (ttl 4, id 34315, len 44)
15:06:43.892707 130.102.2.15 > 130.102.1.69: icmp: 130.102.2.15 udp
port 33445 unreachable (ttl 61, id 23356, len 56)
15:06:43.892788 130.102.1.69.34304 > 130.102.2.15.33446: [no cksum] udp
16 (ttl 4, id 34316, len 44)
15:06:43.893001 130.102.2.15 > 130.102.1.69: icmp: 130.102.2.15 udp
port 33446 unreachable (ttl 61, id 23358, len 56)
--
+- Christopher Smith, Systems Administrator
------------------------------+
| Server & Security Group, Information Technology Services
|
| The University of Queensland, Brisbane, Australia, 4072
|
+- Ph +61 7 3365 4046 | email csmith@its.uq.edu.au | Fax +61 7 3365
4065 -+
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5C9140FE-6592-11D7-BABB-000502F96668>