Community discussions

MikroTik App
just joined
Topic Author
Posts: 8
Joined: Sat May 16, 2020 9:25 pm

Weird behaviour with traceroute

Tue May 19, 2020 7:55 am


Here's my setup. I have one CHR router, one Linux router (abbreviated LR) and two Linux hosts.
Only IPv6 is currently used.
Machine A is a VM connected to CHR with a Linux bridge (they are on the same host).
Machine B is a physical Linux host, connected via Ethernet to LR.
LR and CHR are connected with a GRE tunnel.

A <=> CHR <=> LR <=> B.

All four hosts can ping each other, traffic is successfully forwarded.
But, something weird is going on with traceroutes.
From left to right (A => B) they work fine. But B and LR have broken traceroutes to A or any IPv6 host on the Internet (CHR is the gateway).

Traceroute from A (2001:678:d2c::1) to B (2001:678:d2c:100:593d:dbf1:875d:45fc):
traceroute to 2001:678:d2c:100:593d:dbf1:875d:45fc (2001:678:d2c:100:593d:dbf1:875d:45fc), 30 hops max, 80 byte packets
 1  2001:678:d2c:: (2001:678:d2c::)  0.112 ms  0.109 ms  0.106 ms
 2  2001:678:d2c:1ff::1 (2001:678:d2c:1ff::1)  15.237 ms  15.553 ms  15.550 ms
 3  2001:678:d2c:100:593d:dbf1:875d:45fc (2001:678:d2c:100:593d:dbf1:875d:45fc)  17.779 ms  17.779 ms  17.775 ms
It goes through CHR (2001:678:d2c::) and LR (2001:678:d2c:1ff::1) as expected.

Traceroute from B to A:
traceroute to 2001:678:d2c::1 (2001:678:d2c::1), 30 hops max, 80 byte packets
 1  _gateway (2001:678:d2c:100::)  0.378 ms  0.360 ms  0.358 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  lnms (2001:678:d2c::1)  17.800 ms  17.797 ms  17.792 ms
It goes through LR (2001:678:d2c:100::) then we have 9 missing hops which doesn't make sense as they should not be missing, and there should not be as much as it should be the same path as A to B, but reversed.
And finally we get the response from A (2001:678:d2c::1).

CHR and LR IPv6 firewalls are currently empty, accepting everything in, out, and forward.
Using some log rules on CHR, I've been able to see that it is indeed forwarding all the missing hops to A, but it never replies with Type 3 Time Exceeded, while it does the other way around.

I hope this is clear enough, I can provide more details if needed.

If anyone could help, this would be greatly appreciated! I've been trying for two days but I really don't get it.


Who is online

Users browsing this forum: Baidu [Spider], npero and 50 guests