Blocking proto 41, how to confirm?
Shadow Hawkins on Friday, 16 April 2010 13:15:08
I'm trying to setup a tunnel to a host that I suspect is no a network blocking proto 41.
Tunnel is setup, I can see the packets going out merrily, but never any reply.
Is there any test I can do to make absolutely sure to present as evidence to the network admin, or is that the best I'll get?
Blocking proto 41, how to confirm?
Jeroen Massar on Friday, 16 April 2010 13:27:00
Like usual with any kind of problems: provide details. What did you try, what network are you connected to etc etc etc.
traceroutes, tcpdumps (including ICMP) etc etc come in mind.
Blocking proto 41, how to confirm?
Shadow Hawkins on Friday, 16 April 2010 13:39:48
Setup a proto 41 tunnel for debian pretty much exactly as on the site here.
Interface comes up. TX packets go out, never any RX packets.
Test case is "ping6 ipv6.google.com".
With tcpdump I can see the icmp pings go out, but no traffic coming back for the tunnel at all.
I've now got things withing with a AYIYA tunnel, but this isn't ideal.
Blocking proto 41, how to confirm?
Jeroen Massar on Friday, 16 April 2010 13:42:31
Proto-41 (SIT) interfaces on Linux (almost, as it can run out of memory) comes up. That does not mean it is working in any way, just that it is configured. That configuration can then still be done wrongly of course. Without details (aka output, or how the rest of the internet calls it: picture or it didn't happen), nobody will be able to tell you if it is correct or something is wrong.
With tcpdump I can see the icmp pings go out, but no traffic coming back for the tunnel at all.
You see the 'traffic' go out? Over which interface, what route? etc etc etc....
Posting is only allowed when you are logged in. |