Bug#217256: netselect: 0% - 9999 : more info

2005-12-13 Thread Bill Wohler
I'm seeing this problem too:

  [EMAIL PROTECTED]:1048]$ sudo netselect -vvv ftp.fr.debian.org
  Running netselect to choose 1 out of 1 address.
  ftp.fr.debian.org   - TIMEOUT

Traceroute doesn't even get to my ISP:

  traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 40 byte packets
   1  di-713p (192.168.0.1) 36 bytes to 192.168.0.104  1.141 ms  14.304 ms  
3.186 ms
   2  * * *

Ping and mtr work fine though:

  [EMAIL PROTECTED]:1051]$ ping -c 1 ftp.fr.debian.org
  PING ftp.fr.debian.org (212.27.32.66) 56(84) bytes of data.
  64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=50 time=361 ms

  --- ftp.fr.debian.org ping statistics ---
  1 packets transmitted, 1 received, 0% packet loss, time 0ms
  rtt min/avg/max/mdev = 361.714/361.714/361.714/0.000 ms


  My traceroute  [v0.69]
 olgas (0.0.0.0)(tos=0x0 psize=64 bitpattern=0x00)  Tue Dec 13 13:00:14 2005
 Keys:  Help   Display mode   Restart statistics   Order of fields   quit
Packets   Pings
  HostLoss%   Snt   Last   Avg  Best  Wrst StDev
  1. 192.168.0.1   0.0%171.4   2.1   1.1   5.4   1.3
  2. 172.31.255.2510.0%17   20.6  20.9  16.8  27.2   2.7
  3. 192.168.21.57 0.0%17   17.5  40.9  17.0 158.9  45.2
  4. ge-6-14.car2.SanJose1.Level3.net  5.9%17   16.8  20.0  15.9  37.0   6.0
  5. ae-1-52.bbr2.SanJose1.Level3.net  0.0%17   18.6  20.8  16.0  46.9   7.3
  6. so-7-0-0.edge1.SanJose1.Level3.n  5.9%17   21.3  19.6  16.4  39.2   5.5
  7. 65.59.88.202  0.0%17   18.3  18.1  16.4  22.6   1.3
  8. if-14-0.core2.SQN-SanJose.telegl  0.0%17  185.3 230.4 182.3 461.9  76.9
  9. if-7-0.core2.PDI-PaloAlto.Telegl  0.0%17  185.6 202.8 183.1 387.0  52.6
 10. if-1-0.mcore4.PDI-PaloAlto.teleg  0.0%17  185.2 197.6 181.3 331.1  39.6
 11. 216.6.86.14   0.0%17  130.0 108.5  99.5 177.6  19.1
 12. if-3-0.core2.PG1-Paris.teleglobe  0.0%17  180.4 182.6 180.4 186.4   1.8
 13. ix-7-0.core2.PG1-Paris.teleglobe 81.2%17  186.2 187.8 186.2 190.2   2.2
 14. th2-6k-2-po8.intf.routers.proxad 50.0%17  185.6 188.6 184.7 194.7   4.0
 15. p19-6k-2-po4.intf.routers.proxad 62.5%17  186.2 186.8 185.9 189.0   1.2
 16. vlq-6k-2-v810.intf.routers.proxa  6.2%16  191.4 188.7 185.6 194.5   2.8
 17. vlq-6k-1-po1.intf.routers.proxad  0.0%16  363.5 367.7 361.2 396.9   8.7
 18. debian.proxad.net 6.2%16  367.3 364.6 360.8 370.3   2.7



-- 
Bill Wohler [EMAIL PROTECTED]  http://www.newt.com/wohler/  GnuPG ID:610BD9AD
Maintainer of comp.mail.mh FAQ and MH-E. Vote Libertarian!
If you're passed on the right, you're in the wrong lane.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#217256: netselect: 0% - 9999 : more info

2005-02-12 Thread Filippo Giunchedi
On Fri, Feb 11, 2005 at 01:35:40PM +0100, Vincent Fourmond wrote:
   I think this is mainly due to the fact that I'm hosted behind an aggressive 
 (and stupid) firewall. 
 I don't know exactly what goes through, but I can tell you this:
 
   UDP doesn't come, whichever the situation;
   only outbound TCP connections are allowed;

maybe also traceroute is blocked (i.e. ICMP type different from echo
request/reply) and indeed the firewall setup is a little stupid :)

could you try traceroute -v ftp.fr.debian.org ?

thanks,
filippo
--
Filippo Giunchedi 
GNU/PG key: 6B79D401
Random signature follows:

Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are,
by definition, not smart enough to debug it.
-- Brian W. Kernighan



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#217256: netselect: 0% - 9999 : more info

2005-02-12 Thread Vincent Fourmond
Filippo Giunchedi wrote:
On Fri, Feb 11, 2005 at 01:35:40PM +0100, Vincent Fourmond wrote:
 

 I think this is mainly due to the fact that I'm hosted behind an aggressive (and stupid) firewall. 
I don't know exactly what goes through, but I can tell you this:

 UDP doesn't come, whichever the situation;
 only outbound TCP connections are allowed;
   

maybe also traceroute is blocked (i.e. ICMP type different from echo
request/reply) and indeed the firewall setup is a little stupid :)
could you try traceroute -v ftp.fr.debian.org ?
 

 traceroute fails:
traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 38 byte packets
1  132.166.55.252 (132.166.55.252) 36 bytes to 132.166.53.137  0.602 
ms  0.563 ms  0.537 ms
2  194.254.183.118 (194.254.183.118) 36 bytes to 132.166.53.137  0.593 
ms  0.491 ms  0.538 ms
3  192.168.4.1 (192.168.4.1) 36 bytes to 132.166.53.137  0.596 ms  
0.497 ms  0.538 ms
4  orsay-a0-2-350.cssi.renater.fr (193.51.183.6) 36 bytes to 
132.166.53.137  5.077 ms  3.709 ms  3.542 ms
5  nri-a-pos12-0.cssi.renater.fr (193.51.179.41) 148 bytes to 
132.166.53.137  4.692 ms  4.848 ms  4.788 ms
6  nri-b-pos11-0.cssi.renater.fr (193.51.179.10) 36 bytes to 
132.166.53.137  4.461 ms  4.099 ms  4.413 ms
7  free-telecom.sfinx.tm.fr (194.68.129.223) 36 bytes to 
132.166.53.137  4.467 ms  4.608 ms  4.895 ms
8  p19-6k-2-v806.routers.proxad.net (212.27.50.161) 36 bytes to 
132.166.53.137  4.595 ms  4.977 ms  4.786 ms
9  vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5) 36 bytes to 
132.166.53.137  4.738 ms  4.854 ms  4.843 ms
10  vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 36 bytes to 
132.166.53.137  5.124 ms  4.963 ms  4.983 ms
11  * * *
(and then it's only * * * until 30...)

 Whereas tcptraceroute does give the right stuff:
Tracing the path to ftp.fr.debian.org (212.27.32.66) on TCP port 80, 30 
hops max
1  132.166.55.252 (132.166.55.252)  0.574 ms  0.518 ms  0.492 ms
2  194.254.183.118 (194.254.183.118)  0.487 ms  0.515 ms  0.484 ms
3  192.168.4.1 (192.168.4.1)  0.624 ms  0.595 ms  0.503 ms
4  orsay-a0-2-350.cssi.renater.fr (193.51.183.6)  3.877 ms  3.418 ms  
5.567 ms
5  nri-a-pos12-0.cssi.renater.fr (193.51.179.41)  4.618 ms  4.403 ms  
4.725 ms
6  nri-b-pos11-0.cssi.renater.fr (193.51.179.10)  4.481 ms  4.811 ms  
4.874 ms
7  free-telecom.sfinx.tm.fr (194.68.129.223)  5.376 ms  5.320 ms  4.872 ms
8  p19-6k-2-v806.routers.proxad.net (212.27.50.161)  4.878 ms  4.826 
ms  4.874 ms
9  vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5)  5.374 ms  4.820 
ms  4.876 ms
10  vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2)  5.364 ms  4.818 
ms  4.953 ms
11  debian.proxad.net (212.27.32.66) [open]  5.454 ms  4.935 ms  4.928 ms

 So it does really look like the firewall is stupid (that wouldn't 
surprise me, the company which is dealing with computers where I work is 
about as good as my daughter - and she's 6 month old...)

 There you are. I hope to have been helpful !
   Vincent Fourmond
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Bug#217256: netselect: 0% - 9999 : more info

2005-02-12 Thread Filippo Giunchedi
On Sat, Feb 12, 2005 at 03:02:14PM +0100, Vincent Fourmond wrote:
  traceroute fails:
 
 traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 38 byte packets
[...]
 10  vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 36 bytes to 
 132.166.53.137  5.124 ms  4.963 ms  4.983 ms
 11  * * *
 (and then it's only * * * until 30...)
 
  Whereas tcptraceroute does give the right stuff:
 
 Tracing the path to ftp.fr.debian.org (212.27.32.66) on TCP port 80, 30 
[...]
 10  vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2)  5.364 ms  4.818 
 ms  4.953 ms
 11  debian.proxad.net (212.27.32.66) [open]  5.454 ms  4.935 ms  4.928 ms
 
  So it does really look like the firewall is stupid (that wouldn't 
 surprise me, the company which is dealing with computers where I work is 
 about as good as my daughter - and she's 6 month old...)

haha, but you see, ICMPs are going back and further from your firewall (if it
isn't so you can't even trace your first hop!) so it is a matter of some router
in-between. (I can ICMP traceroute debian.proxad.net, though)
The best thing would be to have a -t|--tcp switch in netselect to do tcp
traceroute instead of icmp (and workaround dumb firewalls)
patches are welcome :)

thanks for your report,
filippo
--
Filippo Giunchedi 
GNU/PG key: 6B79D401
Random signature follows:

I was once walking through the forest alone. A tree fell right
in front of me -- and I didn't hear it.
-- Steven Wright


pgpq0fSXgoymz.pgp
Description: PGP signature


Bug#217256: netselect: 0% - 9999 : more info

2005-02-12 Thread Vincent Fourmond

haha, but you see, ICMPs are going back and further from your firewall (if it
isn't so you can't even trace your first hop!) so it is a matter of some router
in-between. 

 That's kind of curious, but I guess it has to be this way...
(I can ICMP traceroute debian.proxad.net, though)
The best thing would be to have a -t|--tcp switch in netselect to do tcp
traceroute instead of icmp (and workaround dumb firewalls)
patches are welcome :)
 

 I would be glad to contribute, but unfortunately, I am busy enough not 
to find time to sleep, and I don't know much about networking (though 
I'd love to know !). Maybe in a few month when the rush is over ;-) ?

 Thanks
   Vincent Fourmond
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Bug#217256: netselect: 0% - 9999 : more info

2005-02-11 Thread Vincent Fourmond
Package: netselect
Version: 0.3.ds1-3
Followup-For: Bug #217256


  Hello !

  I also got the same problem as previoulsy reported, namely: I can ping hosts, 
but netselect reports 
that the hosts are down:

gaia ~ $ ping -vv ftp.fr.debian.org 
PING ftp.fr.debian.org (212.27.32.66) 56(84) bytes of data.
64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=55 time=9.58 ms
64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=2 ttl=55 time=5.09 ms

--- ftp.fr.debian.org ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 5.092/7.339/9.586/2.247 ms

gaia ~ $ netselect -vv ftp.fr.debian.org 
Running netselect to choose 1 out of 1 address. 

ftp.fr.debian.org  ms  30 hops0% ok


  I think this is mainly due to the fact that I'm hosted behind an aggressive 
(and stupid) firewall. 
I don't know exactly what goes through, but I can tell you this:

  UDP doesn't come, whichever the situation;
  only outbound TCP connections are allowed;

  Obviouly, ping probes do work, so I don't really know what to say.

  Could the problems come from this ?? Would there be any workaround ?

Vincent Fourmond

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.7
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages netselect depends on:
ii  debconf [debconf-2.0]   1.4.45   Debian configuration management sy
ii  libc6   2.3.2.ds1-20 GNU C Library: Shared libraries an

-- debconf information:
* netselect/install-setuid: true


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]