BTW, Top Netvision support people have claimed that it's an anti-DDOS mechanism....
But that seems strange - I mean, filtering legitimate TCP web requests (tcptracroute) - 20% of the packets over just a few requests? Can anyone on Netvision try a simple web request with a sniffer and see if there are any packet re-requests? (I would, but I'm our of town) On Sat, Apr 5, 2008 at 8:51 PM, Michael Tewner <[EMAIL PROTECTED]> wrote: > Yeah - I seem to be getting 20-30% loss on TCP packets to www.cnn.com > on the same router that was dropping the ICMP packets. (#4 below) > > Selected device eth0, address 10.1.1.193, port 38669 for outgoing packets > Tracing the path to www.cnn.com (64.236.29.120) on TCP port 80 (www), > 30 hops max > 1 10.1.1.254 0.514 ms 0.974 ms 0.985 ms > 2 XXXXXXXXX 0.986 ms 0.988 ms 0.983 ms > 3 xxxxxxx.ser.netvision.net.il (XXXXXXXX) 9.403 ms 11.062 ms 12.373 ms > 4 vl100.coresw2.hfa.nv.net.il (212.143.8.69) 13.803 ms * 10.785 ms > 5 ge0-1.gw2.hfa.nv.net.il (212.143.8.212) 9.913 ms 9.894 ms 26.442 ms > 6 pos1-0.brdr1.nyc.nv.net.il (212.143.12.13) 255.455 ms 247.516 ms > > > On Fri, Apr 4, 2008 at 11:30 PM, Amos Shapira <[EMAIL PROTECTED]> wrote: > > On Fri, Apr 4, 2008 at 10:35 PM, Michael Tewner <[EMAIL PROTECTED]> wrote: > > > > > Just talked to Netvision Asakim support - > > > He was knowlegable - ran `mtr` on his workstation and saw the packet > > loss. > > > > > > He explained that "there is no problem" and that the core routers are > > > dropping the ping packets based on the amount of load on the router. > > > He explained that the router should only be dropping ICMP packets. > > > > I didn't read all the messages on this thread but maybe if you could run the > > same tests with tcptraceroute you could see weather the packet drop happens > > to TCP packets or not? > > > > --Amos > > > > > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
