I haven't solved the problem yet. From 012 someone "superior" (network dep) are supposed to call me and they will put hot on conference and this time I intend to request the net admin/integrator to take care of that AND ask them to go directly to the switch and disable the firewall.The ip from where there is 75-80% packet lost is a principal switchand another 1 or 2 ips where I get additional ~15-20% packet lost. They have a harsh firewall on the main switch. ALL UDP ports are blocked. TCP also a lot of ports closed.
tcptraceroute (as opposed to traceroute manages to bypass firewall) reveals that there is a firewall, although inside hot (between switches) the ports are open (firewalk). As for the problem you had last week, I am not sure, because I have static IP without dialer (MPLS) and the first 2 hops belong to hot (where the packet loss occurs) and the 3rd hop is 012. One of support guys said that is 012 blame because they are only infrastructure. 012 says it's hot ip and they are right. And I am the ball which is ping-ponged. ;-( AND ttl to my default gateway is 255. ttl for google.com is 225. But, I will try wireshark as well to check syn, syn-ack. I don't use 3 way handshake. Otherwise I will be detected. I use nmap -sS. I understand that you used -sT flag. Correct? They make troubles if you scan their net? -sT for instance? If you can tell me what exactly you ran, I will be glad. On 3/28/08, Jonathan Ben Avraham <[EMAIL PROTECTED]> wrote: > Hi Sara, > Did you solve this problem? > Are you sure that it isn't a routing problem at 012 similar to what I had > last week with Netvision? > > - yba > > > On Fri, 21 Mar 2008, sara fink wrote: > > > Date: Fri, 21 Mar 2008 22:10:56 +0200 > > From: sara fink <[EMAIL PROTECTED]> > > To: Israeli Linux mailing list <linux-il@cs.huji.ac.il> > > Subject: major packet loss at hot server > > > > Hello Everyone > > > > I am having major problem with packet loss at some hot server that > > sits in tel aviv. www.dnsstuff.com revealed this info. > > > > I would like to know how many people suffer from this problem. > > > > For this task mtr program is needed. The program can be downloaded at > > http://www.bitwizard.nl/mtr/ . > > > > The description of the program is mtr combines the functionality > > of the traceroute and ping programs in a single network diagnostic > > tool. > > > > As mtr starts, it investigates the network connection between the > > host mtr runs on and HOSTNAME. by sending packets with purposly > > low TTLs. It continues to send packets with low TTL, noting the > > response time of the intervening routers. This allows mtr to print > > the response percentage and response times of the internet route > > to HOSTNAME. A sudden increase in packetloss or response time > > is often an indication of a bad (or simply overloaded) link. > > > > After installing this program please run the command mtr google.com or > > even mtr walla.co.il mtr ynet.co.il > > > > I got in all 3 urls ~75% packet loss at ip 213.57.43.199 and at > > 213.57.43.22 (or 14) another ~20% packet loss. > > > > Please inform me how many people suffer from this problem and who is > > their isp. Mine is 012. but the ips mentioned belong to hot. > > > > I already talked with a nice technician at hot and he promissed to > > give me an answer. Meanwhile at 012 tried to help me and in the end he > > told me it's a operating sytem problem. I just hate to hear such > > stupid excuses. I tried bot with and without iptables and it's the > > same. Instead of solving the problem they blame the OS. And all this > > happens with router or without. > > > > Besides that, the first IP is actually border gateway. > > > > Thanks for your help > > > > ================================================================= > > To unsubscribe, send mail to [EMAIL PROTECTED] with > > the word "unsubscribe" in the message body, e.g., run the command > > echo unsubscribe | mail [EMAIL PROTECTED] > > > > > > -- > EE 77 7F 30 4A 64 2E C5 83 5F E7 49 A6 82 29 BA ~. .~ Tk Open > Systems > =}------------------------------------------------ooO--U--Ooo------------{= > - [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il - > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
