- Posts: 69
- Thank you received: 0
Ping Question
17 years 7 months ago #21088
by krik
Christophe Lemaire
www.exp-networks.be/blog/
Replied by krik on topic Re: Ping Question
I see two possible sources, your ping is probably blocked by a router ACL (or a firewall) OR a device (router or firewall) doesn't know how to reach the destination network.
The message stating that 4 packets have been sent and 4 have been received is correct because the PC has sent 4 ICMP echo request and the device which block them or which don't know how to route them sent back ICMP destination unreachable packets... So the PC has well received 4 packets back but they weren't ICMP echo reply.
Regards,
Krik
The message stating that 4 packets have been sent and 4 have been received is correct because the PC has sent 4 ICMP echo request and the device which block them or which don't know how to route them sent back ICMP destination unreachable packets... So the PC has well received 4 packets back but they weren't ICMP echo reply.
Regards,
Krik
Christophe Lemaire
www.exp-networks.be/blog/
- FallenZer0
- Offline
- Premium Member
Less
More
- Posts: 259
- Thank you received: 0
17 years 7 months ago #21089
by FallenZer0
Are you sure of the what I have bolded and underlined? The error message is 'destination host unreachable'. To me it implies, the packets are being delivered to the destination network, but not to the host.
Something to think about.
Cheers
-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
Replied by FallenZer0 on topic Re: Ping Question
I see two possible sources, your ping is probably blocked by a router ACL (or a firewall) OR a device (router or firewall) doesn't know how to reach the destination network.
Regards,
Krik
Are you sure of the what I have bolded and underlined? The error message is 'destination host unreachable'. To me it implies, the packets are being delivered to the destination network, but not to the host.
Something to think about.
Cheers
-There Is A Foolish Corner In The Brain Of The Wisest Man- Aristotle
17 years 7 months ago #21090
by S0lo
I'm confused here, I assume that some one told you about the output but you did not see it your self. Can you try to let them drop you a copy of the output. It would really help.
Ammar
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Replied by S0lo on topic Re: Ping Question
No screen shots sorry.I work in a help desk role so i dont actually see the screen myself but it has happened a few times.
I'm confused here, I assume that some one told you about the output but you did not see it your self. Can you try to let them drop you a copy of the output. It would really help.
Ammar
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
17 years 7 months ago #21101
by krik
It appears that Cisco router (and probably some other devices) send an ICMP destination host unreachable when destination network is unreachable... I just did a very simple test in a lab as follow :
R1 --- R2 --- R3
R1 try to ping R3 loopback, it has a route towards R2 to reach it. However R2 hasn't the route to R3's loopback. On R1 here is what a 'debug ip icmp' shows :
[code:1]R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
U
*Mar 1 00:05:43.963: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2.U
*Mar 1 00:05:46.047: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2.U
Success rate is 0 percent (0/5)
R1#
*Mar 1 00:05:48.127: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2[/code:1]
R2 doesn't have a route to network 3.3.3.0/24 but it sends a host unreachable to R1 instead of network unreachable...
Regards,
Krik
Christophe Lemaire
www.exp-networks.be/blog/
Replied by krik on topic Re: Ping Question
I see two possible sources, your ping is probably blocked by a router ACL (or a firewall) OR a device (router or firewall) doesn't know how to reach the destination network.
Regards,
Krik
Are you sure of the what I have bolded and underlined? The error message is 'destination host unreachable'. To me it implies, the packets are being delivered to the destination network, but not to the host.
Something to think about.
Cheers
It appears that Cisco router (and probably some other devices) send an ICMP destination host unreachable when destination network is unreachable... I just did a very simple test in a lab as follow :
R1 --- R2 --- R3
R1 try to ping R3 loopback, it has a route towards R2 to reach it. However R2 hasn't the route to R3's loopback. On R1 here is what a 'debug ip icmp' shows :
[code:1]R1#ping 3.3.3.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3.3.3.3, timeout is 2 seconds:
U
*Mar 1 00:05:43.963: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2.U
*Mar 1 00:05:46.047: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2.U
Success rate is 0 percent (0/5)
R1#
*Mar 1 00:05:48.127: ICMP: dst (1.1.1.1) host unreachable rcv from 1.1.1.2[/code:1]
R2 doesn't have a route to network 3.3.3.0/24 but it sends a host unreachable to R1 instead of network unreachable...
Regards,
Krik
Christophe Lemaire
www.exp-networks.be/blog/
17 years 7 months ago #21103
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Ping Question
Kirk,
That would make sense from the router point of view however i think everyone here (well definatley me) had presumed the reply had come from the host that was being pinged.
GTM can you confirm, do the reply actually come from the end host that was being pinged or a router/firewall along the way ?
Cheers
That would make sense from the router point of view however i think everyone here (well definatley me) had presumed the reply had come from the host that was being pinged.
GTM can you confirm, do the reply actually come from the end host that was being pinged or a router/firewall along the way ?
Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
17 years 7 months ago #21112
by GTM
Replied by GTM on topic Re: Ping Question
To be honest Smurf i dont really know like i said it has happened a few times so i cant be sure if it was the exact same replys everytime because the first one or two times i didnt really think much of it.Now having said that on the last occasion this happened a tracert did not get passed the adsl router so i presume the ping replys are coming from it.
Time to create page: 0.157 seconds