Discussion Locked

Network Problems and ICMP errors

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I work in the corporate offices for a company. From the corporate office, we have 12 frame relay connections to regional offices throughout the country. One of our offices was complaining about slow network speeds. I pinged their router, and recieved the following:

[root@ogma /root]# ping 192.168.16.1
PING 192.168.16.1 (192.168.16.1): 56 octets data
64 octets from 192.168.16.1: icmp_seq=0 ttl=254 time=2797.0 ms
wrong data byte #0 should be 0x3f but was 0x3d3d 51 b4 3c 9b b c 0 8 9 a b c d e f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27
28 29 2a 2b 2c 2d 2e 2f
64 octets from 192.168.16.1: icmp_seq=1 ttl=254 time=3167.2 ms
wrong data byte #0 should be 0x41 but was 0x3e3e 51 b4 3c 761 c 0
8 9 a b c d e f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27
28 29 2a 2b 2c 2d 2e 2f
64 octets from 192.168.16.1: icmp_seq=2 ttl=254 time=3037.2 ms
wrong data byte #0 should be 0x42 but was 0x3f3f 51 b4 3c 76 1 c 0
8 9 a b c d e f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27
28 29 2a 2b 2c 2d 2e 2f

--- 192.168.16.1 ping statistics ---
6 packets transmitted, 3 packets received, 50% packet loss
round-trip min/avg/max = 2797.0/3000.4/3167.2 ms

This happens on and off...and does not occur with any other regional offices.

They have a Cisco 1600R router. We have a Cisco 2500 router and a Checkpoint Firewall on a Solaris Box.

This happens intermittantly. Any ideas? I can't find any decent explanation anywhere. For 1000 points...a REAL explanation and solution would be great!

Thanks,

Christian

10 replies

by c the soup

Also...I have talked to our frame relay carrier...and they can find no problems with the connection. As far as they are concerned...it's not a problem with their network.

by Former member

In order to do some troubleshooting, you need to isolate the problem. Ping router to router, wan interfaces only and go out from there. Use different size packets, 64 to 1500 bytes. So if you get inconsistent pings router-to-router, start pinging with different data patterns. On a Cisco you do an extended ping, and use like a data pattern of all FFFFs, or all 0x0000. If one of those fail u may have a line encoding mismatch. Carrier problem. But if your routers can ping consistenly no problems, no matter the size/pattern, then it's your lan and you still need to isolate...

by charlesc

Are you using the VPN feature on the CheckPoint firewall? If you are that's the cause. We had the same problem and turned out that when the packets were decripted on the firewall it took a long time. After we loaded the latest update to Checkpoint the problem went away.

by armandos

To start you want to do a tracerouter and see where the data is going. This will help to know how many hops it takes and to see i fyou have any loops in your network.
Also take a look at your config route statment.

This discussion is closed to new replies.