Bug#217256: netselect: 0% - 9999 : more info
I'm seeing this problem too: [EMAIL PROTECTED]:1048]$ sudo netselect -vvv ftp.fr.debian.org Running netselect to choose 1 out of 1 address. ftp.fr.debian.org - TIMEOUT Traceroute doesn't even get to my ISP: traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 40 byte packets 1 di-713p (192.168.0.1) 36 bytes to 192.168.0.104 1.141 ms 14.304 ms 3.186 ms 2 * * * Ping and mtr work fine though: [EMAIL PROTECTED]:1051]$ ping -c 1 ftp.fr.debian.org PING ftp.fr.debian.org (212.27.32.66) 56(84) bytes of data. 64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=50 time=361 ms --- ftp.fr.debian.org ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 361.714/361.714/361.714/0.000 ms My traceroute [v0.69] olgas (0.0.0.0)(tos=0x0 psize=64 bitpattern=0x00) Tue Dec 13 13:00:14 2005 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings HostLoss% Snt Last Avg Best Wrst StDev 1. 192.168.0.1 0.0%171.4 2.1 1.1 5.4 1.3 2. 172.31.255.2510.0%17 20.6 20.9 16.8 27.2 2.7 3. 192.168.21.57 0.0%17 17.5 40.9 17.0 158.9 45.2 4. ge-6-14.car2.SanJose1.Level3.net 5.9%17 16.8 20.0 15.9 37.0 6.0 5. ae-1-52.bbr2.SanJose1.Level3.net 0.0%17 18.6 20.8 16.0 46.9 7.3 6. so-7-0-0.edge1.SanJose1.Level3.n 5.9%17 21.3 19.6 16.4 39.2 5.5 7. 65.59.88.202 0.0%17 18.3 18.1 16.4 22.6 1.3 8. if-14-0.core2.SQN-SanJose.telegl 0.0%17 185.3 230.4 182.3 461.9 76.9 9. if-7-0.core2.PDI-PaloAlto.Telegl 0.0%17 185.6 202.8 183.1 387.0 52.6 10. if-1-0.mcore4.PDI-PaloAlto.teleg 0.0%17 185.2 197.6 181.3 331.1 39.6 11. 216.6.86.14 0.0%17 130.0 108.5 99.5 177.6 19.1 12. if-3-0.core2.PG1-Paris.teleglobe 0.0%17 180.4 182.6 180.4 186.4 1.8 13. ix-7-0.core2.PG1-Paris.teleglobe 81.2%17 186.2 187.8 186.2 190.2 2.2 14. th2-6k-2-po8.intf.routers.proxad 50.0%17 185.6 188.6 184.7 194.7 4.0 15. p19-6k-2-po4.intf.routers.proxad 62.5%17 186.2 186.8 185.9 189.0 1.2 16. vlq-6k-2-v810.intf.routers.proxa 6.2%16 191.4 188.7 185.6 194.5 2.8 17. vlq-6k-1-po1.intf.routers.proxad 0.0%16 363.5 367.7 361.2 396.9 8.7 18. debian.proxad.net 6.2%16 367.3 364.6 360.8 370.3 2.7 -- Bill Wohler [EMAIL PROTECTED] http://www.newt.com/wohler/ GnuPG ID:610BD9AD Maintainer of comp.mail.mh FAQ and MH-E. Vote Libertarian! If you're passed on the right, you're in the wrong lane. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#217256: netselect: 0% - 9999 : more info
On Fri, Feb 11, 2005 at 01:35:40PM +0100, Vincent Fourmond wrote: I think this is mainly due to the fact that I'm hosted behind an aggressive (and stupid) firewall. I don't know exactly what goes through, but I can tell you this: UDP doesn't come, whichever the situation; only outbound TCP connections are allowed; maybe also traceroute is blocked (i.e. ICMP type different from echo request/reply) and indeed the firewall setup is a little stupid :) could you try traceroute -v ftp.fr.debian.org ? thanks, filippo -- Filippo Giunchedi GNU/PG key: 6B79D401 Random signature follows: Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it. -- Brian W. Kernighan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#217256: netselect: 0% - 9999 : more info
Filippo Giunchedi wrote: On Fri, Feb 11, 2005 at 01:35:40PM +0100, Vincent Fourmond wrote: I think this is mainly due to the fact that I'm hosted behind an aggressive (and stupid) firewall. I don't know exactly what goes through, but I can tell you this: UDP doesn't come, whichever the situation; only outbound TCP connections are allowed; maybe also traceroute is blocked (i.e. ICMP type different from echo request/reply) and indeed the firewall setup is a little stupid :) could you try traceroute -v ftp.fr.debian.org ? traceroute fails: traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 38 byte packets 1 132.166.55.252 (132.166.55.252) 36 bytes to 132.166.53.137 0.602 ms 0.563 ms 0.537 ms 2 194.254.183.118 (194.254.183.118) 36 bytes to 132.166.53.137 0.593 ms 0.491 ms 0.538 ms 3 192.168.4.1 (192.168.4.1) 36 bytes to 132.166.53.137 0.596 ms 0.497 ms 0.538 ms 4 orsay-a0-2-350.cssi.renater.fr (193.51.183.6) 36 bytes to 132.166.53.137 5.077 ms 3.709 ms 3.542 ms 5 nri-a-pos12-0.cssi.renater.fr (193.51.179.41) 148 bytes to 132.166.53.137 4.692 ms 4.848 ms 4.788 ms 6 nri-b-pos11-0.cssi.renater.fr (193.51.179.10) 36 bytes to 132.166.53.137 4.461 ms 4.099 ms 4.413 ms 7 free-telecom.sfinx.tm.fr (194.68.129.223) 36 bytes to 132.166.53.137 4.467 ms 4.608 ms 4.895 ms 8 p19-6k-2-v806.routers.proxad.net (212.27.50.161) 36 bytes to 132.166.53.137 4.595 ms 4.977 ms 4.786 ms 9 vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5) 36 bytes to 132.166.53.137 4.738 ms 4.854 ms 4.843 ms 10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 36 bytes to 132.166.53.137 5.124 ms 4.963 ms 4.983 ms 11 * * * (and then it's only * * * until 30...) Whereas tcptraceroute does give the right stuff: Tracing the path to ftp.fr.debian.org (212.27.32.66) on TCP port 80, 30 hops max 1 132.166.55.252 (132.166.55.252) 0.574 ms 0.518 ms 0.492 ms 2 194.254.183.118 (194.254.183.118) 0.487 ms 0.515 ms 0.484 ms 3 192.168.4.1 (192.168.4.1) 0.624 ms 0.595 ms 0.503 ms 4 orsay-a0-2-350.cssi.renater.fr (193.51.183.6) 3.877 ms 3.418 ms 5.567 ms 5 nri-a-pos12-0.cssi.renater.fr (193.51.179.41) 4.618 ms 4.403 ms 4.725 ms 6 nri-b-pos11-0.cssi.renater.fr (193.51.179.10) 4.481 ms 4.811 ms 4.874 ms 7 free-telecom.sfinx.tm.fr (194.68.129.223) 5.376 ms 5.320 ms 4.872 ms 8 p19-6k-2-v806.routers.proxad.net (212.27.50.161) 4.878 ms 4.826 ms 4.874 ms 9 vlq-6k-2-v800.intf.routers.proxad.net (212.27.50.5) 5.374 ms 4.820 ms 4.876 ms 10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 5.364 ms 4.818 ms 4.953 ms 11 debian.proxad.net (212.27.32.66) [open] 5.454 ms 4.935 ms 4.928 ms So it does really look like the firewall is stupid (that wouldn't surprise me, the company which is dealing with computers where I work is about as good as my daughter - and she's 6 month old...) There you are. I hope to have been helpful ! Vincent Fourmond -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#217256: netselect: 0% - 9999 : more info
On Sat, Feb 12, 2005 at 03:02:14PM +0100, Vincent Fourmond wrote: traceroute fails: traceroute to ftp.fr.debian.org (212.27.32.66), 30 hops max, 38 byte packets [...] 10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 36 bytes to 132.166.53.137 5.124 ms 4.963 ms 4.983 ms 11 * * * (and then it's only * * * until 30...) Whereas tcptraceroute does give the right stuff: Tracing the path to ftp.fr.debian.org (212.27.32.66) on TCP port 80, 30 [...] 10 vlq-6k-1-po1.intf.routers.proxad.net (212.27.50.2) 5.364 ms 4.818 ms 4.953 ms 11 debian.proxad.net (212.27.32.66) [open] 5.454 ms 4.935 ms 4.928 ms So it does really look like the firewall is stupid (that wouldn't surprise me, the company which is dealing with computers where I work is about as good as my daughter - and she's 6 month old...) haha, but you see, ICMPs are going back and further from your firewall (if it isn't so you can't even trace your first hop!) so it is a matter of some router in-between. (I can ICMP traceroute debian.proxad.net, though) The best thing would be to have a -t|--tcp switch in netselect to do tcp traceroute instead of icmp (and workaround dumb firewalls) patches are welcome :) thanks for your report, filippo -- Filippo Giunchedi GNU/PG key: 6B79D401 Random signature follows: I was once walking through the forest alone. A tree fell right in front of me -- and I didn't hear it. -- Steven Wright pgpq0fSXgoymz.pgp Description: PGP signature
Bug#217256: netselect: 0% - 9999 : more info
haha, but you see, ICMPs are going back and further from your firewall (if it isn't so you can't even trace your first hop!) so it is a matter of some router in-between. That's kind of curious, but I guess it has to be this way... (I can ICMP traceroute debian.proxad.net, though) The best thing would be to have a -t|--tcp switch in netselect to do tcp traceroute instead of icmp (and workaround dumb firewalls) patches are welcome :) I would be glad to contribute, but unfortunately, I am busy enough not to find time to sleep, and I don't know much about networking (though I'd love to know !). Maybe in a few month when the rush is over ;-) ? Thanks Vincent Fourmond -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#217256: netselect: 0% - 9999 : more info
Package: netselect Version: 0.3.ds1-3 Followup-For: Bug #217256 Hello ! I also got the same problem as previoulsy reported, namely: I can ping hosts, but netselect reports that the hosts are down: gaia ~ $ ping -vv ftp.fr.debian.org PING ftp.fr.debian.org (212.27.32.66) 56(84) bytes of data. 64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=1 ttl=55 time=9.58 ms 64 bytes from debian.proxad.net (212.27.32.66): icmp_seq=2 ttl=55 time=5.09 ms --- ftp.fr.debian.org ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 5.092/7.339/9.586/2.247 ms gaia ~ $ netselect -vv ftp.fr.debian.org Running netselect to choose 1 out of 1 address. ftp.fr.debian.org ms 30 hops0% ok I think this is mainly due to the fact that I'm hosted behind an aggressive (and stupid) firewall. I don't know exactly what goes through, but I can tell you this: UDP doesn't come, whichever the situation; only outbound TCP connections are allowed; Obviouly, ping probes do work, so I don't really know what to say. Could the problems come from this ?? Would there be any workaround ? Vincent Fourmond -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.7 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages netselect depends on: ii debconf [debconf-2.0] 1.4.45 Debian configuration management sy ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an -- debconf information: * netselect/install-setuid: true -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]