Very Computer

by **Charles A. Burg** » Mon, 24 Feb 2003 04:26:56

I have three computers at home running different versions of Mandrake, all
behind a NAT device (D-Link DI-701), and none of them can run a traceroute
properly. Traceroute correctly resolves the IP address of the remote host,
but for the steps in between, only returns
1 * * *
2 * * *
3 * * *
and so on. I know it's not a network problem, because all Windows computers
on my network trace just fine. One machine dual-boots Win2K and Mdk9.0,
and traces correctly in Windows but not in Linux. Any ides why? Also, why
do I have to be root in order to run traceroute? Can that be changed?

Charles

by **CTE** » Mon, 24 Feb 2003 05:34:47

> I have three computers at home running different versions of Mandrake, all
> behind a NAT device (D-Link DI-701), and none of them can run a traceroute
> properly. Traceroute correctly resolves the IP address of the remote host,
> but for the steps in between, only returns
> 1 * * *
> 2 * * *
> 3 * * *
> and so on. I know it's not a network problem, because all Windows computers
> on my network trace just fine. One machine dual-boots Win2K and Mdk9.0,
> and traces correctly in Windows but not in Linux. Any ides why? Also, why
> do I have to be root in order to run traceroute? Can that be changed?

> Charles

Is ICMP type 11 (i think) allowed?
I read it is necessary to do a traceroute.

--
Chris Engel
CTE Net
http://ctenet.cjb.net/

by **Sybren Stuve** » Mon, 24 Feb 2003 05:52:26

Charles A. Burge enlightened us with:

Quote:> I have three computers at home running different versions of
> Mandrake, all behind a NAT device (D-Link DI-701), and none of them
> can run a traceroute properly. Traceroute correctly resolves the IP
> address of the remote host, but for the steps in between, only
> returns 1 * * * 2 * * * 3 * * * and so on.

Have you tried 'traceroute -n'?

Quote:> I know it's not a network problem, because all Windows computers on
> my network trace just fine. One machine dual-boots Win2K and Mdk9.0,
> and traces correctly in Windows but not in Linux. Any ides why?

Running a local firewall perhaps?

Quote:> Also, why do I have to be root in order to run traceroute?

No

Quote:> Can that be changed?

No

Sybren
--
| Somebody ought to cross ball point pens with coat hangers so that |
| the pens will multiply instead of disappear. |
\-------------------------------------------------------------------/
If you have to use Outlook, fix it: http://jump.to/oe-quotefix

by **Hal Burgis** » Mon, 24 Feb 2003 09:02:42

On Sat, 22 Feb 2003 19:26:56 GMT, Charles A. Burge

> Any ides why?

Perhaps it is trying the wrong interface.

--
Hal Burgiss

by **Andrew Hoo** » Mon, 24 Feb 2003 14:30:13

>> I have three computers at home running different versions of Mandrake,
>> all behind a NAT device (D-Link DI-701), and none of them can run a
>> traceroute properly. Traceroute correctly resolves the IP address of
>> the remote host, but for the steps in between, only returns 1 * * * 2 *
>> * *
>> 3 * * *
>> and so on. I know it's not a network problem, because all Windows
>> computers on my network trace just fine. One machine dual-boots Win2K
>> and Mdk9.0, and traces correctly in Windows but not in Linux. Any ides
>> why? Also, why do I have to be root in order to run traceroute? Can
>> that be changed?

>> Charles

> Is ICMP type 11 (i think) allowed?
> I read it is necessary to do a traceroute.

*nix versions of traceroute use UDP to an unlikely port.
Some of these let you use ICMP, but it is not the default.

--
Avoid reality at all costs.
$email =~ s/oz$/au/o;

by **Adam** » Mon, 24 Feb 2003 19:22:38

Quote:> I have three computers at home running different versions of Mandrake, all
> behind a NAT device (D-Link DI-701), and none of them can run a traceroute
> properly. Traceroute correctly resolves the IP address of the remote
> host, but for the steps in between, only returns
> 1 * * *
> 2 * * *
> 3 * * *
> and so on. I know it's not a network problem, because all Windows
> computers
> on my network trace just fine. One machine dual-boots Win2K and Mdk9.0,
> and traces correctly in Windows but not in Linux. Any ides why? Also,
> why
> do I have to be root in order to run traceroute? Can that be changed?

I fixed this by putting the following in ~/.bashrc:

alias traceroute='/usr/sbin/traceroute -I'

The -I option causes the command to use ICMP instead of UDP.

I think you probably don't have to be root to run traceroute but the shell
can't find the command unless you specify the path. /usr/sbin/ is normally
in root's PATH but not a user's.

by **Bill Marcu** » Tue, 25 Feb 2003 01:45:38

On Sat, 22 Feb 2003 19:26:56 GMT, Charles A. Burge

> and traces correctly in Windows but not in Linux. Any ides why? Also, why
> do I have to be root in order to run traceroute? Can that be changed?

use /sbin/traceroute or add /sbin to your PATH.

by **Charles A. Burg** » Tue, 25 Feb 2003 01:52:46

>> I have three computers at home running different versions of Mandrake,
>> all behind a NAT device (D-Link DI-701), and none of them can run a
>> traceroute
>> properly. Traceroute correctly resolves the IP address of the remote
>> host, but for the steps in between, only returns
>> 1 * * *
>> 2 * * *
>> 3 * * *
>> and so on. I know it's not a network problem, because all Windows
>> computers
>> on my network trace just fine. One machine dual-boots Win2K and Mdk9.0,
>> and traces correctly in Windows but not in Linux. Any ides why? Also,
>> why
>> do I have to be root in order to run traceroute? Can that be changed?

> I fixed this by putting the following in ~/.bashrc:

> alias traceroute='/usr/sbin/traceroute -I'

> The -I option causes the command to use ICMP instead of UDP.

> I think you probably don't have to be root to run traceroute but the shell
> can't find the command unless you specify the path. /usr/sbin/ is normally
> in root's PATH but not a user's.

That solved both issues for me. Thank you very much!

Charles

by **Andrew Hoo** » Tue, 25 Feb 2003 18:16:17

>> I have three computers at home running different versions of Mandrake,
>> all behind a NAT device (D-Link DI-701), and none of them can run a
>> traceroute properly. Traceroute correctly resolves the IP address of
>> the remote host, but for the steps in between, only returns 1 * * * 2 *
>> * *
>> 3 * * *
>> and so on. I know it's not a network problem, because all Windows
>> computers on my network trace just fine. One machine dual-boots Win2K
>> and Mdk9.0, and traces correctly in Windows but not in Linux. Any ides
>> why? Also, why do I have to be root in order to run traceroute? Can
>> that be changed?

>> Charles

> Is ICMP type 11 (i think) allowed?
> I read it is necessary to do a traceroute.

Yes, ICMP_TIME_EXCEEDED packets must be allowed inbound.

I'd think you should allow all ICMPs inbound except maybe ICMP_REDIRECT
(5) ICMP_ECHO (8) ICMP_INFO_REQUEST (15) ICMP_ADDRESS (17)

--
Avoid reality at all costs.
$email =~ s/oz$/au/o;

Very Computer

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work

Traceroute doesn't work