RE: traceroute question


Subject: RE: traceroute question
From: Buddha (buddha@gci.net)
Date: Mon Feb 04 2002 - 13:37:14 AKST


Outside:

Win client-->Firewall(inside-eth1)-->Firewall(outside-eth0)-->CGI

-----Original Message-----
From: Patrick Laidlaw [mailto:Tek9@alaska.com]
Sent: Monday, February 04, 2002 1:28 PM
To: 'Buddha'; aklug@aklug.org
Subject: RE: traceroute question

Is ETH0 inside or the outside interface?

-----Original Message-----
From: aklug-bounce@aklug.org [mailto:aklug-bounce@aklug.org] On Behalf
Of Buddha
Sent: Monday, February 04, 2002 1:15 PM
To: aklug@aklug.org
Subject: traceroute question

This is probably a Networking 101 question, but I'll ask anyways.

When I do a tracert from one of my machine's to anywhere, my firewall's
eth0 address doesn't show up in the path.

C:\>tracert www.gci.net
Tracing route to www.gci.net [208.138.130.18]
over a maximum of 30 hops:
  1 <10 ms <10 ms <10 ms clarkconnect.lan [192.168.1.1]
  2 61 ms 10 ms 20 ms 1-208-237-24-cable.anchorageak.net
[24.237.208.1]
  3 20 ms 20 ms 10 ms styx.gci.net [208.138.129.15]
  4 20 ms 20 ms 30 ms www.gci.net [208.138.130.18]

If I do a tracert to my dynamic dns provider the address "shows up".

C:\>tracert buddha.pointclark.net
Tracing route to buddha.pointclark.net [24.237.211.169]
over a maximum of 30 hops:
  1 <10 ms <10 ms <10 ms 169-211-237-24-cable.anchorageak.net
[24.237.211.169]

Question: Why doesn't external IP address appear on outbound
traceroutes? It looks like in the first example that the eth0 interface
is being "skipped over". Reason I'm asking is 'cause I'm trying to use
NTOP to analyze my traffic and this anomaly is throwing me off.

Thanx in advance,
Jim "Buddha" McMorris



This archive was generated by hypermail 2a23 : Tue Feb 05 2002 - 16:58:37 AKST