Re: Detect where a connection drop occurs

--e89a8ff1c6d6a681f904d64b5bf7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

1. netstat -ant
2. if returns 0.0.0.0:548 its ok
3. else: check your service if it's connected to VPN interface only.

4. Traceroute to HOST not PORT. Port pinging can be blocked by your
Internet Provider.
5. Check Your IPtables rules if You don't block any ports or set connlimit,
rejects etc.: iptables -L
6. Check Your IDS software like Prelude/Snort.

Best regards,
MM


2013/2/22 Vin=C3=ADcius Ferr=C3=A3o <[email protected]>

> Hello dudes,
>
> I've configured an service and I know it's working normally through TCP
> port 548. But I'm only able to connect to it using a VPN connection.
>
> I need to debug it detecting where (in which hop) the connection is being
> dropped.
>
> Any ideias on how to do that?
>
> I've tried tcptraceroute without success:
>
> sudo tcptraceroute www.mydomain.com 548
> Selected device en0, address 172.16.144.115, port 49302 for outgoing
> packets
> Tracing the path to www.mydomain.com (146.164.36.7) on TCP port 548
> (afpovertcp), 30 hops max
>  1  172.16.144.1  0.769 ms  0.598 ms  0.686 ms
>  2  * * *
>  3  * * *
>  4  * * *
>  5  * * *
>  6  * * *
>  7  * * *
>  8  * * *
>  9  * * *
> 10  * * *
> 11  * * *
> 12  * * *
> 13  * * *
> 14  * * *
> 15  * * *
> 16  * * *
> 17  * * *
> 18  * * *
> 19  * * *
> 20  * * *
> 21  * * *
> 22  * * *
> 23  * * *
> 24  * * *
> 25  * * *
> 26  * * *
> 27  * * *
> 28  * * *
> 29  * * *
>
> Thanks in advance,
>
>
>  *Vin=C3=ADcius Ferr=C3=A3o*: Administrador de Sistemas
> www.ferrao.eti.br | +55 (21) 8888-2619
>
>

--e89a8ff1c6d6a681f904d64b5bf7
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,<br><br>1. netstat -ant<br>2. if returns <a href=3D"http://0.0.0.0:548">=
0.0.0.0:548</a> its ok<br>3. else: check your service if it&#39;s connected=
 to VPN interface only.<br><br>4. Traceroute to HOST not PORT. Port pinging=
 can be blocked by your Internet Provider.<br>
5. Check Your IPtables rules if You don&#39;t block any ports or set connli=
mit, rejects etc.: iptables -L <br>6. Check Your IDS software like Prelude/=
Snort.<br><br>Best regards,<br>MM<br><br><br><div class=3D"gmail_quote">201=
3/2/22 Vin=C3=ADcius Ferr=C3=A3o <span dir=3D"ltr">&lt;<a href=3D"mailto:vi=
[email protected]" target=3D"_blank">[email protected]</a>&gt=
;</span><br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word">Hello du=
des,<div><br></div><div>I&#39;ve configured an service and I know it&#39;s =
working normally through TCP port 548. But I&#39;m only able to connect to =
it using a VPN connection.</div>
<div><br></div><div>I need to debug it detecting where (in which hop) the c=
onnection is being dropped.</div><div><br></div><div>Any ideias on how to d=
o that?</div><div><br></div><div>I&#39;ve tried tcptraceroute without succe=
ss:</div>
<div><br></div><div><div>sudo tcptraceroute <a href=3D"http://www.mydomain.=
com" target=3D"_blank">www.mydomain.com</a> 548</div><div>Selected device e=
n0, address 172.16.144.115, port 49302 for outgoing packets</div><div>Traci=
ng the path to <a href=3D"http://www.mydomain.com" target=3D"_blank">www.my=
domain.com</a> (146.164.36.7) on TCP port 548 (afpovertcp), 30 hops max</di=
v>
<div>=C2=A01 =C2=A0172.16.144.1 =C2=A00.769 ms =C2=A00.598 ms =C2=A00.686 m=
s</div><div>=C2=A02 =C2=A0* * *</div><div>=C2=A03 =C2=A0* * *</div><div>=C2=
=A04 =C2=A0* * *</div><div>=C2=A05 =C2=A0* * *</div><div>=C2=A06 =C2=A0* * =
*</div><div>=C2=A07 =C2=A0* * *</div><div>=C2=A08 =C2=A0* * *</div><div>=C2=
=A09 =C2=A0* * *</div><div>
10 =C2=A0* * *</div><div>11 =C2=A0* * *</div><div>12 =C2=A0* * *</div><div>=
13 =C2=A0* * *</div><div>14 =C2=A0* * *</div><div>15 =C2=A0* * *</div><div>=
16 =C2=A0* * *</div><div>17 =C2=A0* * *</div><div>18 =C2=A0* * *</div><div>=
19 =C2=A0* * *</div><div>20 =C2=A0* * *</div><div>21 =C2=A0* * *</div>
<div>22 =C2=A0* * *</div></div><div>23 =C2=A0* * *</div><div>24=C2=A0=C2=A0=
* * *</div><div>25=C2=A0=C2=A0* * *</div><div>26=C2=A0=C2=A0* * *</div><div=
>27=C2=A0=C2=A0* * *</div><div>28=C2=A0=C2=A0* * *</div><div>29=C2=A0=C2=A0=
* * *</div><div><br></div><div>Thanks in advance,</div><div><br></div>
<div><br><div>
<div style=3D"line-height:13px;margin:6px 0;padding:8px;border-top:1px #999=
999 dotted;border-bottom:1px #999999 dotted;font-family:&#39;Lucida Grande&=
#39;,Verdana,Arial,Sans-Serif;font-size:11px;color:#336699">
		<b style=3D"color:#336699">Vin=C3=ADcius Ferr=C3=A3o</b>: Administrador d=
e Sistemas <br>
		<a href=3D"http://www.ferrao.eti.br" style=3D"color:#336699;text-decorati=
on:none;border-bottom:1px #999999 dotted" target=3D"_blank">www.ferrao.eti.=
br</a> | <a href=3D"tel:%2B55%20%2821%29%208888-2619" value=3D"+55218888261=
9" target=3D"_blank">+55 (21) 8888-2619</a>
</div>

</div>
<br></div></div></blockquote></div><br>

--e89a8ff1c6d6a681f904d64b5bf7--