huh

Steven M. Bellovin smb at research.att.com
Tue Jan 15 20:06:48 UTC 2002


In message <200201151959.g0FJxFv03307 at nms.lcs.mit.edu>, "David G. Andersen" wri
tes:
>
>Ian A Finlay just mooed:
>> 
>> I wonder what's up?
>> 
>> bash-2.04$ traceroute windowsupdate.microsoft.com
>> traceroute to windowsupdate.microsoft.com (207.68.131.27), 30 hops max, 40
>> [...]
>>  8  POS6-0.GW4.DCA8.ALTER.NET (152.63.35.197)  14.747 ms  13.515 ms
>> 12.878 ms
>>  9  65.195.34.226 (65.195.34.226)  653.529 ms  709.526 ms  702.782 ms
>> 10  * * *
>> 11  * * *
>> 12  * * *
>
>  Um, it's firewalled?  Most of microsoft isn't traceroutable or
>pingable.

Yup:

b129$ ipsrvtrace -p 80 windowsupdate.microsoft.com
1       oden.research.att.com   135.207.31.1    0.474   0.338   0.304
2       janus.research.att.com  135.207.1.2     1.360   1.951   2.577
3       argus.research.att.com  192.20.225.225  2.973   3.505   4.063
4       12.119.155.157  12.119.155.157  3.543   4.035   4.603
5       gbr5-p52.n54ny.ip.att.net       12.123.192.10   4.897   5.433   6.188
6       tbr2-p013301.n54ny.ip.att.net   12.122.11.25    6.190   7.795   8.417
7       ggr1-p320.n54ny.ip.att.net      12.122.12.22    4.518   5.232   6.299
8       POS5-1.BR1.NYC9.ALTER.NET       204.255.169.93  6.384   7.661   8.211
9       0.so-6-0-0.XL2.NYC9.ALTER.NET   152.63.18.222   5.242   6.388   6.952
10      0.so-0-0-0.XR2.NYC9.ALTER.NET   152.63.9.89     5.377   5.897   6.586
11      0.so-3-0-0.TR2.NYC9.ALTER.NET   152.63.22.94    4.873   5.388   5.949
12      125.at-7-0-0.TL2.DCA8.ALTER.NET 146.188.141.197 11.861  12.356  12.932
13      0.so-4-3-0.XL2.DCA8.ALTER.NET   152.63.144.30   11.740  13.227  13.792
14      POS7-0.GW4.DCA8.ALTER.NET       152.63.35.201   10.737  11.228  11.778
15      65.195.34.226   65.195.34.226   155.934 156.415 156.973
16      iusbsecurc1202-ge-6-0.msft.net  207.68.128.66   13.109  13.598  14.142
17      -       -       *       *       *
18      207.68.131.27   207.68.131.27   13.988  14.373  *
b130$ traceroute windowsupdate.microsoft.com      
traceroute to windowsupdate.microsoft.com (207.68.131.27), 30 hops max, 40 byte packets
 1  oden (135.207.31.1)  0.424 ms  0.270 ms  0.245 ms
 2  janus (135.207.1.2)  1.156 ms  2.943 ms  1.346 ms
 3  argus (192.20.225.225)  2.345 ms  1.875 ms  1.749 ms
 4  12.119.155.157 (12.119.155.157)  3.412 ms  3.288 ms  3.567 ms
 5  gbr5-p52.n54ny.ip.att.net (12.123.192.10)  4.277 ms  4.860 ms  4.038 ms
 6  tbr2-p013301.n54ny.ip.att.net (12.122.11.25)  5.238 ms  5.344 ms  4.821 ms
 7  ggr1-p320.n54ny.ip.att.net (12.122.12.22)  4.360 ms  5.456 ms  4.098 ms
 8  POS5-1.BR1.NYC9.ALTER.NET (204.255.169.93)  4.823 ms  4.466 ms  4.360 ms
 9  0.so-6-0-0.XL2.NYC9.ALTER.NET (152.63.18.222)  4.753 ms  5.054 ms  6.305 ms
10  0.so-0-0-0.XR2.NYC9.ALTER.NET (152.63.9.89)  5.017 ms  4.816 ms  4.572 ms
11  0.so-3-0-0.TR2.NYC9.ALTER.NET (152.63.22.94)  6.842 ms  9.812 ms  4.747 ms
12  125.at-7-0-0.TL2.DCA8.ALTER.NET (146.188.141.197)  11.163 ms  11.162 ms  11.214 ms
13  0.so-4-3-0.XL2.DCA8.ALTER.NET (152.63.144.30)  11.414 ms  11.665 ms  11.232 ms
14  POS7-0.GW4.DCA8.ALTER.NET (152.63.35.201)  10.842 ms  11.577 ms  10.759 ms
15  65.195.34.226 (65.195.34.226)  170.249 ms  123.845 ms  135.542 ms
16  * * *
17  * * *
18  * * *
19  * *^C


		--Steve Bellovin, http://www.research.att.com/~smb
		Full text of "Firewalls" book now at http://www.wilyhacker.com





More information about the NANOG mailing list