ICMP Blocking Woes

Anthony Cennami narziss at cdardn.net
Tue Sep 30 12:31:28 UTC 2003


They are filtering either ICMP echo or echo reply; using an LBNL/Unix 
traceroute is successful the entire path.


Eric Kagan wrote:

>>WindowsNT tracert.exe uses 92 byte icmp packets. There is a modified
> 
> version
> 
>>that uses a smaller sized icmp packet at
>>http://www.nthelp.com/NT6/tracert_broken.htm that works fine on Windows
>>2000.
> 
> 
> So if tracert1 doesn't work, would that mean Comcast is actually blocking
> all ICMP ?  I have been told they are only blocking 135-139, 4444
> I get the same results with tracert and tracert1 (below)
> 
> D:\Temp>ver
> 
> Microsoft Windows 2000 [Version 5.00.2195]
> 
> D:\Temp>tracert1 www.advil.com
> 
> Tracing route to www.advil.com [164.109.5.98] over a maximum of 30 hops:
> 
>   1    20 ms    10 ms    10 ms  c-24-218-168-1.ne.client2.attbi.com
> [24.218.168.1]
>   2    20 ms    10 ms    10 ms  24.62.0.245
>   3     *        *        *     Request timed out.
>   4     *        *        *     Request timed out.
>   5     *        *        *     Request timed out.
>   6     *        *        *     Request timed out.
>   7     *        *        *     Request timed out.
> 
> D:\Temp>tracert www.advil.com
> 
> Tracing route to www.advil.com [164.109.5.98] over a maximum of 30 hops:
> 
>   1    20 ms    10 ms    10 ms  c-24-218-168-1.ne.client2.attbi.com
> [24.218.168.1]
>   2    10 ms    10 ms    20 ms  24.62.0.245
>   3     *        *        *     Request timed out.
>   4     *        *        *     Request timed out.
>   5     *        *        *     Request timed out.
>   6     *     ^C
> 
> 
> Eric
> 





More information about the NANOG mailing list