Re: Can ping but cannot trace

Same thought here, but you will need to make sure that time-exceeded
and unreachables are allowed in the return path.

There are also some applications that will use TCP to traceroute that
you may find useful.

Just google tcptraceroute.

Regards,

Brandon Carroll - CCIE #23837
Senior Technical Instructor - IPexpert
Mailto: bcarroll_at_ipexpert.com
Telephone: +1.810.326.1444
Live Assistance, Please visit: www.ipexpert.com/chat
eFax: +1.810.454.0130

IPexpert is a premier provider of Self-Study Workbooks, Video on
Demand, Audio Tools, Online Hardware Rental and Classroom Training for
the Cisco CCIE (R&S, Voice, Security & Service Provider)
certification(s) with training locations throughout the United States,
Europe, South Asia and Australia. Be sure to visit our online
communities at www.ipexpert.com/communities and our public website at
www.ipexpert.com

On Thu, Mar 11, 2010 at 10:29 AM, Sadiq Yakasai <sadiqtanko_at_gmail.com> wrote:
> Hi Mr. Kapoor,
>
> It means there is an ACL somewhere between serverA and the first hop
> dropping either UDP or ICMP time-exceeded in one direction. I guess you are
> gonna have to do some more digging around on all transit devices to know
> whats really up :-)
>
> Do you have access to the transit devices? Can we see some ACLs on all ports
> in the path?
>
> Hope that helps a little,
>
> Sadiq
>
> On Thu, Mar 11, 2010 at 6:23 PM, aashish kapoor <operationccie_at_gmail.com>wrote:
>
>> Hi
>>
>> Setup is like Server A-> Switch 1 -> ASA 1 -> Router 1 -> Router 2 -> ASA 2
>> -> Router 3 -> Router 4 -> Router 5 -> Server B
>> I am facing a weired problem. I am able to ping from server A to server B.
>> But when I trace it gets dropped at first hop.
>> While it is working if i do trace from Server B to Server A.
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> CCIE #19963

Blogs and organic groups at http://www.ccie.net
Received on Thu Mar 11 2010 - 13:14:42 ART