>>From: "Kevin W. Thomas" <kwthomas@xxxxxxxxxxxxxxxxxx>
>>Organization: UCAR/Unidata
>>Keywords: 200308202000.h7KK04Ld017925 IDD traceroute ldmping
>
>Kevin and Gilbert,
>
>RE:
>>>What LDM are you running? If not 6.014, an upgrade should solve that.
>>>Maybe OU is blocking incoming 388 as a suspect DOS attack?
>>
>>We're running an older LDM, however, I don't think that is the problem.
>>I can't reach your web site from OU.
>>
>>Traceroute shows:
>>
>>traceroute to weather2.admin.niu.edu (131.156.8.58), 30 hops max, 40 byte pack
>> ets
>> 1 129.15.192.1 (129.15.192.1) 0.682 ms 0.697 ms 0.399 ms
>> 2 192.168.255.233 (192.168.255.233) 0.748 ms 0.635 ms 1.283 ms
>> 3 164.58.10.97 (164.58.10.97) 1.471 ms 1.524 ms 0.944 ms
>> 4 164.58.10.213 (164.58.10.213) 1.522 ms 1.562 ms 1.125 ms
>> 5 164.58.10.158 (164.58.10.158) 1.795 ms 1.811 ms 1.736 ms
>> 6 tulsok6wcx2-pos2-0.wcg.net (64.200.227.105) 3.902 ms 3.239 ms 3.569 ms
>> 7 64.200.240.81 (64.200.240.81) 9.740 ms 9.631 ms 9.315 ms
>> 8 dllstx1wcx2-pos9-0.wcg.net (64.200.110.129) 9.624 ms 9.879 ms 9.481 ms
>> 9 dllstx9lce1-oc48.wcg.net (64.200.110.82) 9.094 ms 9.338 ms 9.120 ms
>>10 dllstx9lce1-level3-pos.wcg.net (64.200.110.150) 9.231 ms 9.473 ms 9.654
>> ms
>>11 so-1-2-0.bbr1.Dallas1.level3.net (209.244.15.161) 9.197 ms 9.218 ms 9.0
>> 98 ms
>>12 209.247.9.82 (209.247.9.82) 32.800 ms 33.080 ms 33.074 ms
>>13 gige9-0.hsipaccess1.Chicago1.Level3.net (64.159.1.226) 32.722 ms 32.977
>> ms 32.477 ms
>>14 h5-0-0-1.niu.bbnplanet.net (4.0.201.174) 105.053 ms 35.244 ms 37.023 ms
>>15 131.156.168.1 (131.156.168.1) 37.193 ms 37.536 ms 36.391 ms
>>16 * * *
>
>We can successfully do a traceroute and ldmping from the UPC to Gilbert's
>machine, weather2.admin.niu.edu:
>
>% traceroute to weather2.admin.niu.edu (131.156.8.58), 30 hops max, 40 byte
>packets
> 1 flra-n140 (128.117.140.252) 1 ms 0 ms 0 ms
> 2 gin-n243-80.ucar.edu (128.117.243.81) 1 ms 1 ms 1 ms
> 3 64.140.70.213 (64.140.70.213) 2 ms 2 ms 2 ms
> 4 170.147.161.94 (170.147.161.94) 3 ms 3 ms 2 ms
> 5 199.183.38.6 (199.183.38.6) 28 ms 28 ms 28 ms
> 6 peer01.sji-ca.icg.net (170.147.129.3) 27 ms 32 ms 28 ms
> 7 170.147.0.74 (170.147.0.74) 29 ms 28 ms 28 ms
> 8 GigabitEthernet1-0-108.edge1.paix-sjo1.Level3.net (209.245.146.197) 32 ms
> 32 ms 32 ms
> 9 GigabitEthernet3-2.core1.SanJose1.Level3.net (209.244.3.253) 31 ms 32 ms
> 32 ms
>10 ae0-52.mp2.SanJose1.Level3.net (64.159.2.33) 32 ms 31 ms 31 ms
>11 so-0-0-0.bbr1.Chicago1.level3.net (209.247.9.78) 54 ms 54 ms 55 ms
>12 gige8-0.hsipaccess1.Chicago1.Level3.net (64.159.1.222) 54 ms 54 ms 54 ms
>13 h5-0-0-1.niu.bbnplanet.net (4.0.201.174) 59 ms 57 ms 57 ms
>14 131.156.168.1 (131.156.168.1) 58 ms 58 ms 57 ms
>15 * * *
>16 weather2.admin.niu.edu (131.156.8.58) 87 ms^C
>
>% ldmping weather2.admin.niu.edu
>Aug 20 20:02:00 State Elapsed Port Remote_Host rpc_stat
>Aug 20 20:02:00 RESPONDING 0.237881 388 weather2.admin.niu.edu
>Aug 20 20:02:25 RESPONDING 0.068136 388 weather2.admin.niu.edu
>Aug 20 20:02:50 RESPONDING 0.062403 388 weather2.admin.niu.edu
>Aug 20 20:03:16 RESPONDING 0.063707 388 weather2.admin.niu.edu
>Aug 20 20:03:41 RESPONDING 0.071672 388 weather2.admin.niu.edu
>
>Given that the traceroute path from us to Gilbert is goes through the
>same node, 131.156.168.1, and we can get through, it is likely that
>the problem has either cleared itself up, or your access is being
>blocked.
>
>Tom
I did some log checking, and found the following:
munchkin.caps.ou.edu Connection started failing Thursday August 14th at
8:24pm CDT. I haven't had any connections since.
winkie.caps.ou.edu I was wrong. This machine *can* connect, however, it
is getting "access denied". This started on Friday
August 15th at 9:23am.
I've been able to come with a lot of CAPS computers than can connect to
"niu.edu", and I can come with a lot that can't.
Kevin W. Thomas
Center for Analysis and Prediction of Storms
University of Oklahoma
Norman, Oklahoma
Email: kwthomas@xxxxxx
