next hop packet loss

Jim Ray jim at neuse.net
Tue Aug 7 08:12:02 CDT 2012


Sorry, I do not give verbose responses via iPhone on that small device
with my tired old eyes. I ran Wireshark this morning.

Without sniffing packets, the layman's description of problem is "I
can't get to vendor web site, http://www.CheckPoint.com, on Time Warner
Business Class network I use." Hence, http is blocked in addition to
ICMP.

It is what it is. Personally, I plan to use the phone to reach Check
Point since TCP/IP won't work. I also got call back from top local
executive at Time Warner this morning that has known me 17 years,
understands the problem and is trying to help. Again, no emergency here.
Still, I would like it to work and pay extra to have the commercial
connection with service level agreement.

Regards,

Jim Ray, President
Neuse River Networks
2 Davis Drive, PO Box 13169
Research Triangle Park, NC 27709
919-838-1672 x100
www.NeuseRiverNetworks.com


-----Original Message-----
From: tom at ninjabadger.net [mailto:tom at ninjabadger.net] 
Sent: Tuesday, August 07, 2012 5:38 AM
To: Jim Ray
Cc: Tom Hill; nanog at nanog.org
Subject: Re: next hop packet loss

Well, you haven't provided any proof of that. Their website works just
fine for me (TM).

Since your troubleshooting is limited to methods that are blocked by
Checkpoint's network, you might need to revisit how you're going about
diagnosing the problem you're facing.

In any case, I won't be providing any further input following that
response.

Tom

> It is a problem with http protocol regardless of ICMP.
>
> Sent from my iPhone
>
> On Aug 6, 2012, at 5:51 PM, "Tom Hill" <tom at ninjabadger.net> wrote:
>
>> Hi Jim,
>>
>> On 06/08/12 22:27, Jim Ray wrote:
>>> What is the best way to solve this type of problem?
>>
>> It's not a problem, it's checkpoint purporting to be 'secure' when 
>> all they're doing is blocking ICMP outright, seemingly.
>>
>> If I try 'tcptraceroute' (from Linux) it works just fine, bare the 
>> Above.net hop in the middle that doesn't respond - ignore.
>>
>> $ sudo tcptraceroute -n checkpoint.com traceroute to checkpoint.com 
>> (216.200.241.66), 30 hops max, 60 byte packets
>> 1  81.187.203.81  0.719 ms  1.050 ms  1.298 ms
>> 2  90.155.53.54  30.184 ms  31.604 ms  32.370 ms
>> 3  90.155.53.43  33.891 ms  35.072 ms  36.021 ms
>> 4  85.91.238.217  37.016 ms  38.236 ms  39.215 ms
>> 5  85.91.224.10  40.226 ms  41.358 ms  42.354 ms
>> 6  212.187.200.145  164.713 ms  164.102 ms  164.020 ms
>> 7  4.69.139.99  45.316 ms  194.042 ms  194.088 ms
>> 8  64.125.14.17  194.297 ms  193.943 ms  193.558 ms
>> 9  64.125.31.198  194.304 ms  194.462 ms  193.560 ms
>> 10  * * *
>> 11  64.125.26.37  288.267 ms  284.237 ms  166.340 ms
>> 12  64.125.24.38  178.571 ms  179.467 ms  156.769 ms
>> 13  64.125.28.238  148.002 ms  147.244 ms  147.501 ms
>> 14  64.125.26.141  206.010 ms  205.574 ms  205.426 ms
>> 15  64.125.28.57  201.753 ms  172.439 ms  174.169 ms
>> 16  64.124.201.230  176.866 ms  172.412 ms  172.510 ms
>> 17  208.185.174.208  173.668 ms  174.310 ms  173.999 ms
>> 18  216.200.241.66 <syn,ack>  172.504 ms  172.386 ms  172.700 ms
>>
>>
>> Tom
>>
>





More information about the NANOG mailing list