This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Have packet capture, somethings wrong

0

Hey all, I have a packet (dont know where I can attach it, but I have a link below) that has a t1 connection to the internet that is "not working"

If anyone can help me as to why on line 94, destination host unreachable is displaying, that would be awesome. Thank you.

Here is the packet link:

https://www.dropbox.com/s/5eqli7z84taa9au/jp-capture-tdc376.pcap

asked 04 Nov '13, 15:09

candyluls's gravatar image

candyluls
6●1●1●3
accept rate: 0%

One Answer:

1

In frame #93 there is an SNMP request from 140.192.39.96 -> 140.192.40.56. That request did not make it to the destination as some system on the way blocked the request. The ICMP message in frame #94 is the response for that.

94  0.001756    140.192.34.95   140.192.39.96   ICMP    70      Destination unreachable (Communication administratively filtered)

Communication administratively filtered means that there is a kind of filter (router ACL or firewall), that prohibited the SNMP request of frame #93. The system that sent the ICMP packet (140.192.34.95) is a good candidate for the ACL or firewall.

Regards
Kurt

answered 04 Nov '13, 15:46

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

edited 04 Nov '13, 15:48

Thank you very much kurt!!

(05 Nov '13, 11:25) candyluls