[LDM #EAS-993522]: FW: DREN Ticket 3475

Jonathan,

> Thank you for your response. I was trying to verify that we would have a log
> of failed connections in general and not just failed FEEDME requests. In
> this case we have no issue with traceroute at all. As you can see here:
> 
> @sdp1.nrlmry> traceroute aeolus.ucsd.edu
> traceroute to aeolus.ucsd.edu (132.239.114.58), 30 hops max, 40 byte packets
> 1  so3-0-0-0.maewest.dren.net (138.18.4.27)  13.406 ms  37.085 ms  4.124 ms
> 2  198.32.153.205 (198.32.153.205)  4.547 ms  16.252 ms  4.533 ms
> 3  losang-snvang.abilene.ucaid.edu (198.32.8.94)  11.999 ms  29.179 ms
> 24.232 ms
> 4  hpr-lax-gsr1--abilene-LA-10ge.cenic.net (137.164.25.2)  30.908 ms
> 30.907 ms  43.332 ms
> 5  hpr-ucsd-10ge--lax-hpr.cenic.net (137.164.27.165)  34.166 ms  37.026 ms
> 34.078 ms
> 6  sio-msfc--ucsd-gw-t320-ge.ucsd.edu (132.239.255.5)  34.234 ms  34.228 ms
> 34.173 ms
> 7  132.239.114.58 (132.239.114.58)  34.547 ms  34.259 ms  34.310 ms

Relatively small number of hops and fast.  Nice.

> We are also positive that packets are leaving the peering router on the
> border of the DREN network. In this case via Mae-West. Unfortunately as we
> can see from the AS-Path there are 3 networks beyond the DREN network on the
> path to uscd. DREN does not have a relationship with those networks or
> contact information. Any of those networks could be filtering.

Agreed.  Abilene would top my list of suspects because its a university
network and Sirocco's in a .mil domain.

> 132.239.0.0/16     *[BGP/170] 1w4d 21:53:33, MED 366, localpref 125, from
> 138.18.12.245
> AS path: 11537 2153 7377 I

I'm not familiar with the above.  Would you please interpret it.

> Can you verify with your upstream network that there are no firewalls
> blocking packets from nrlmry.navy.mil with or without the source port of TCP
> 388? If there are no blocks there we need to work our way back upstream
> towards DREN. I will contact our peer AS 11537 (Abilene) and try to work
> down towards uscd.

We'll do what we can, but we're not associated with UCSD, so it might
not be enough.

Larry, can you involve your networking people in this?

Regards,
Steve Emmerson

Ticket Details
===================
Ticket ID: EAS-993522
Department: Support LDM
Priority: Normal
Status: On Hold