I can't check symmetry. I don't have adsl. In my case the problem starts at hot. the first 2 hops belong to hot and the 3rd hop is 012. The 80% packet lost is in the first hop. The 2nd hop another 20%. I have MPLS without dialer.
How do I use different routing? Any idea of which ips should I put? I know someone who is very nice at 012. She belongs to service dep, and she promissed to send someone who knows well unix/linux. I will see what I can do today. Otherwise, www.tluna.co.il is the answer. I put last year a complaint there and they started to call me (not vice versa). The problem was solved. There is another weird thing which I don't understand: the ip 213.57.43.199 shows IP address: 213.57.43.199 Reverse DNS: [Timeout] Reverse DNS authenticity: [Unknown] ASN: 8584 ASN Name: UNSPECIFIED (Barak AS) I don't belong to barak. Someone at 012 told me they have agreements and they use each router on the way. http://www.dnsstuff.com/tools/ipall.ch?domain=213.57.43.199 If someone can explain this, I will be glad. On 3/29/08, Jonathan Ben Avraham <[EMAIL PROTECTED]> wrote: > Hi Sara, > Sounds like you should consider switching suppliers. > > Regarding my problem with Netvision reported last week, I was able to show > Netvision the difference in results (5% loss vs 70% loss) when using > different routes through Netvisions AS, mainly depending on where the > connection originated but this did not actually prove that there was a > routing error AFAIK. For some reason I didn't think to test if the packet > loss was symmetric (outgoing as well as incomming). That would > probably have been as close as you could get to a proof of routing error. > > Does your packet loss depend on where you enter 012 from (i.e. from Med1, > from the IIX, from 012 ADSL)? Is the packet loss symmetric? That is do you > lose the same percent of packets on packet going out as comming in? > > From my experience with Netvision, the level of service that you get at > the ISP depends on who knows you, or who knows someone who knows you. > Shavua Tov, > > - yba > > > On Fri, 28 Mar 2008, sara fink wrote: > > > Date: Fri, 28 Mar 2008 16:43:37 +0300 > > From: sara fink <[EMAIL PROTECTED]> > > To: Jonathan Ben Avraham <[EMAIL PROTECTED]> > > Cc: linux-il@cs.huji.ac.il > > Subject: Re: major packet loss at hot server > > > > I haven't solved the problem yet. From 012 someone "superior" (network > > dep) are supposed to call me and they will put hot on conference and > > this time I intend to request the net admin/integrator to take care of > > that AND ask them to go directly to the switch and disable the > > firewall.The ip from where there is 75-80% packet lost is a principal > > switchand another 1 or 2 ips where I get additional ~15-20% packet > > lost. They have a harsh firewall on the main switch. ALL UDP ports > > are blocked. TCP also a lot of ports closed. > > > > tcptraceroute (as opposed to traceroute manages to bypass firewall) > > reveals that there is a firewall, although inside hot (between > > switches) the ports are open (firewalk). As for the problem you had > > last week, I am not sure, because I have static IP without dialer > > (MPLS) and the first 2 hops belong to hot (where the packet loss > > occurs) and the 3rd hop is 012. One of support guys said that is 012 > > blame because they are only infrastructure. 012 says it's hot ip and > > they are right. And I am the ball which is ping-ponged. ;-( > > > > AND ttl to my default gateway is 255. ttl for google.com is 225. > > > > But, I will try wireshark as well to check syn, syn-ack. I don't use 3 > > way handshake. Otherwise I will be detected. I use nmap -sS. I > > understand that you used -sT flag. Correct? > > > > They make troubles if you scan their net? -sT for instance? > > > > If you can tell me what exactly you ran, I will be glad. > > > > On 3/28/08, Jonathan Ben Avraham <[EMAIL PROTECTED]> wrote: > >> Hi Sara, > >> Did you solve this problem? > >> Are you sure that it isn't a routing problem at 012 similar to what I had > >> last week with Netvision? > >> > >> - yba > >> > >> > >> On Fri, 21 Mar 2008, sara fink wrote: > >> > >>> Date: Fri, 21 Mar 2008 22:10:56 +0200 > >>> From: sara fink <[EMAIL PROTECTED]> > >>> To: Israeli Linux mailing list <linux-il@cs.huji.ac.il> > >>> Subject: major packet loss at hot server > >>> > >>> Hello Everyone > >>> > >>> I am having major problem with packet loss at some hot server that > >>> sits in tel aviv. www.dnsstuff.com revealed this info. > >>> > >>> I would like to know how many people suffer from this problem. > >>> > >>> For this task mtr program is needed. The program can be downloaded at > >>> http://www.bitwizard.nl/mtr/ . > >>> > >>> The description of the program is mtr combines the functionality > >>> of the traceroute and ping programs in a single network diagnostic > >>> tool. > >>> > >>> As mtr starts, it investigates the network connection between the > >>> host mtr runs on and HOSTNAME. by sending packets with purposly > >>> low TTLs. It continues to send packets with low TTL, noting the > >>> response time of the intervening routers. This allows mtr to print > >>> the response percentage and response times of the internet route > >>> to HOSTNAME. A sudden increase in packetloss or response time > >>> is often an indication of a bad (or simply overloaded) link. > >>> > >>> After installing this program please run the command mtr google.com or > >>> even mtr walla.co.il mtr ynet.co.il > >>> > >>> I got in all 3 urls ~75% packet loss at ip 213.57.43.199 and at > >>> 213.57.43.22 (or 14) another ~20% packet loss. > >>> > >>> Please inform me how many people suffer from this problem and who is > >>> their isp. Mine is 012. but the ips mentioned belong to hot. > >>> > >>> I already talked with a nice technician at hot and he promissed to > >>> give me an answer. Meanwhile at 012 tried to help me and in the end he > >>> told me it's a operating sytem problem. I just hate to hear such > >>> stupid excuses. I tried bot with and without iptables and it's the > >>> same. Instead of solving the problem they blame the OS. And all this > >>> happens with router or without. > >>> > >>> Besides that, the first IP is actually border gateway. > >>> > >>> Thanks for your help > >>> > >>> ================================================================= > >>> To unsubscribe, send mail to [EMAIL PROTECTED] with > >>> the word "unsubscribe" in the message body, e.g., run the command > >>> echo unsubscribe | mail [EMAIL PROTECTED] > >>> > >>> > >> > >> -- > >> EE 77 7F 30 4A 64 2E C5 83 5F E7 49 A6 82 29 BA ~. .~ Tk Open > >> Systems > >> > =}------------------------------------------------ooO--U--Ooo------------{= > >> - [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il - > >> > > > > ================================================================= > > To unsubscribe, send mail to [EMAIL PROTECTED] with > > the word "unsubscribe" in the message body, e.g., run the command > > echo unsubscribe | mail [EMAIL PROTECTED] > > > > > > -- > EE 77 7F 30 4A 64 2E C5 83 5F E7 49 A6 82 29 BA ~. .~ Tk Open > Systems > =}------------------------------------------------ooO--U--Ooo------------{= > - [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il - > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]