Traceroute explanation
Meftah Tayeb
tayeb.meftah at gmail.com
Wed Dec 7 20:04:31 UTC 2011
Using LFT:
root at debian:~# lft 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
1 172.28.1.1 (172.28.1.1) 0.798 ms 0.711 ms
2 10.16.0.2 (10.16.0.2) 0.414 ms 0.331 ms
3 41.200.16.1 (41.200.16.1) 11.400 ms 11.474 ms
4 172.17.2.25 (172.17.2.25) 10.184 ms 11.322 ms
5 213.140.58.10 (213.140.58.10) 11.264 ms 10.623 ms
6 212.73.253.65 (212.73.253.65) 30.330 ms 32.391 ms
7 ae-4-5.bar1.Marseille1.Level3.net (4.69.151.9) 32.177 ms 32.219 ms
8 ae-7-7.ebr1.Paris1.Level3.net (4.69.143.238) 42.160 ms 42.318 ms
root at debian:~# lft www.rri.ro
traceroute to www.rri.ro (193.231.72.52), 30 hops max, 60 byte packets
1 172.28.1.1 (172.28.1.1) 0.819 ms 0.737 ms
2 10.16.0.2 (10.16.0.2) 0.402 ms 0.335 ms
3 41.200.16.1 (41.200.16.1) 10.592 ms 10.209 ms
4 172.17.2.25 (172.17.2.25) 10.146 ms 10.559 ms
5 213.140.58.10 (213.140.58.10) 11.258 ms 10.369 ms
6 pos14-0.palermo9.pal.seabone.net (195.22.197.125) 30.817 ms 31.439 ms
7 ae-5-6.bar2.Marseille1.Level3.net (4.69.151.13) 33.968 ms 31.395 ms
8 ge-0-0-0.mil19.ip4.tinet.net (213.200.68.145) 57.178 ms
xe-1-1-0.mil10.ip4.
tinet.net (213.200.68.61) 57.749 ms
9 ae-1-12.bar1.Budapest1.Level3.net (4.69.141.249) 61.835 ms 62.317 ms
10 euroweb-gw.ip4.tinet.net (77.67.66.154) 61.361 ms 60.292 ms
11 v15-core1.stsisp.ro (193.151.28.1) 163.662 ms 144.245 ms
12 inet-crli1.qrli1.buh.ew.ro (81.24.28.226) 91.309 ms 89.880 ms
13 193.231.72.10 (193.231.72.10) 80.790 ms 79.354 ms
14 ip4-89-238-225-90.euroweb.ro (89.238.225.90) 91.067 ms 90.906 ms
15 webrri.rri.ro.72.231.193.in-addr.arpa (193.231.72.52) 79.196 ms 79.389
ms
root at debian:~#
----- Original Message -----
From: "Raymond Dijkxhoorn" <raymond at prolocation.net>
To: "Meftah Tayeb" <tayeb.meftah at gmail.com>
Cc: "Steven Bellovin" <smb at cs.columbia.edu>; <nanog at nanog.org>
Sent: Thursday, December 08, 2011 11:40 PM
Subject: Re: Traceroute explanation
Hai!
Check with lft or mtr ...
Thanks,
Raymond Dijkxhoorn, Prolocation
Op 7 dec. 2011 om 20:56 heeft "Meftah Tayeb" <tayeb.meftah at gmail.com> het
volgende geschreven:
> please tel me how to ?
> i don't know astraceroute:)
>
> ----- Original Message ----- From: "Steven Bellovin" <smb at cs.columbia.edu>
> To: "Meftah Tayeb" <tayeb.meftah at gmail.com>
> Cc: "Fred Baker" <fred at cisco.com>; <nanog at nanog.org>
> Sent: Thursday, December 08, 2011 11:33 PM
> Subject: Re: Traceroute explanation
>
>
> On Dec 7, 2011, at 2:51 08PM, Meftah Tayeb wrote:
>
>> big thank for that
>> but, i am testing that for one day :)
>
>
>
> Can you do an AStraceroute or manually translate those addresses into
> AS#s?
> That is, might level3 and tinet be using multiple AS#s, in which case
> this
> isn't unreasonable?
>
>
>
>
>
>>
>>
>> ----- Original Message ----- From: "Fred Baker" <fred at cisco.com>
>> To: "Meftah Tayeb" <tayeb.meftah at gmail.com>
>> Cc: <nanog at nanog.org>
>> Sent: Thursday, December 08, 2011 11:23 PM
>> Subject: Re: Traceroute explanation
>>
>>
>> This is just a guess, but I'll bet the route changed while you were
>> measuring it.
>>
>> Traceroute sends a request, awaits a response, sends a request, ...
>> Suppose that the route was
>>
>> 172.28.0.1 -> 10.16.0.2
>> -> 41.200.16.1
>> -> 172.17.2.25
>> -> 213.140.58.10
>> -> 195.22.195.125
>> -> 4.69.151.13
>> -> 213.200.68.61
>> -> somewhere else
>>
>> and after the test got that far, two systems got inserted into the path
>> before level3, resulting in the route entering level3 at a different
>> point, 4.69.141.249. What you now have is
>>
>> 172.28.0.1 -> 10.16.0.2
>> -> 41.200.16.1
>> -> 172.17.2.25
>> -> 213.140.58.10
>> -> 195.22.195.125
>> -> unknown
>> -> unknown
>> -> 4.69.141.249
>> -> 77.67.66.154
>> -> and so on
>>
>> The effect would be to get a result like this.
>>
>> Next time you see something like this, suggestion: repeat the traceroute
>> and see what you get.
>>
>>
>> On Dec 7, 2011, at 12:12 PM, Meftah Tayeb wrote:
>>
>>> Hey folks,
>>> i see a strange traceroute there
>>>
>>> Détermination de l'itinéraire vers www.rri.ro [193.231.72.52]
>>> avec un maximum de 30 sauts :
>>>
>>> 1 2 ms 1 ms 1 ms 172.28.0.1
>>> 2 1 ms 1 ms 1 ms localhost [10.16.0.2]
>>> 3 10 ms 10 ms 13 ms 41.200.16.1
>>> 4 11 ms 10 ms 11 ms 172.17.2.25
>>> 5 21 ms 21 ms 21 ms 213.140.58.10
>>> 6 34 ms 31 ms 55 ms pos14-0.palermo9.pal.seabone.net
>>> [195.22.197.125
>>> ]
>>> 7 34 ms 33 ms 35 ms ae-5-6.bar2.marseille1.level3.net
>>> [4.69.151.13]
>>> 8 106 ms 68 ms 67 ms xe-1-1-0.mil10.ip4.tinet.net
>>> [213.200.68.61]
>>> 9 74 ms 73 ms 74 ms ae-1-12.bar1.budapest1.level3.net
>>> [4.69.141.249]
>>> 10 63 ms 63 ms 79 ms euroweb-gw.ip4.tinet.net [77.67.66.154]
>>> 11 85 ms 84 ms 84 ms v15-core1.stsisp.ro [193.151.28.1]
>>> 12 100 ms 100 ms 102 ms inet-crli1.qrli1.buh.ew.ro [81.24.28.226]
>>> 13 81 ms 81 ms 81 ms 193.231.72.10
>>> 14 92 ms 92 ms 93 ms ip4-89-238-225-90.euroweb.ro
>>> [89.238.225.90]
>>> 15 89 ms 89 ms 89 ms webrri.rri.ro.72.231.193.in-addr.arpa
>>> [193.231.7
>>> 2.52]
>>> Itinéraire déterminé.
>>> C:\Documents and Settings\TAYEB>
>>> Seabone, then level3, then Tinet, then level3, then tinet ?
>>> if is that a routing stufs that i don't know, please let me know :)
>>> i never saw that befaure
>>>
>>> Meftah Tayeb
>>> IT Consulting
>>> http://www.tmvoip.com/
>>> phone: +21321656139
>>> Mobile: +213660347746
>>>
>>>
>>> __________ Information from ESET NOD32 Antivirus, version of virus
>>> signature database 6695 (20111208) __________
>>>
>>> The message was checked by ESET NOD32 Antivirus.
>>>
>>> http://www.eset.com
>>>
>>
>>
>>
>> __________ Information from ESET NOD32 Antivirus, version of virus
>> signature database 6695 (20111208) __________
>>
>> The message was checked by ESET NOD32 Antivirus.
>>
>> http://www.eset.com
>>
>>
>>
>>
>> __________ Information from ESET NOD32 Antivirus, version of virus
>> signature database 6695 (20111208) __________
>>
>> The message was checked by ESET NOD32 Antivirus.
>>
>> http://www.eset.com
>>
>>
>>
>>
>>
>
>
> --Steve Bellovin, https://www.cs.columbia.edu/~smb
>
>
>
>
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 6695 (20111208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus
> signature database 6695 (20111208) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
__________ Information from ESET NOD32 Antivirus, version of virus signature
database 6695 (20111208) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
__________ Information from ESET NOD32 Antivirus, version of virus signature database 6695 (20111208) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
More information about the NANOG
mailing list