Weird routing issue

Posted by Joel Coel on Server Fault See other posts from Server Fault or by Joel Coel
Published on 2010-03-30T13:30:36Z Indexed on 2010/03/30 13:33 UTC
Read the original article Hit count: 570

Filed under:

I'm having some weird internet problems on campus. I know it's something simple, but it's a case where I need another set of eyes. I think I can explain the problem best by posting a tracert:

Tracing route to google.com [74.125.45.147]
over a maximum of 30 hops:

  1     3 ms     3 ms     3 ms  192.168.8.1 
  2     1 ms     1 ms     1 ms  elissaemily-pc.york.edu [192.168.10.5] 
  3     2 ms     2 ms     2 ms  rrcs-76-79-19-33.west.biz.rr.com [76.79.19.33] 
  4    31 ms     3 ms     2 ms  ge-1-1-0.lnclne00-mx41.neb.rr.com [76.85.220.109] 
  5    20 ms    17 ms    17 ms  ge-7-3-0.chcgill3-rtr1.kc.rr.com [76.85.220.137] 
  6    20 ms    20 ms    19 ms  ae-5-0.cr0.chi30.tbone.rr.com [66.109.6.112] 
  7    19 ms    19 ms    24 ms  ae-1-0.pr0.chi10.tbone.rr.com [66.109.6.155] 
  8    26 ms    24 ms    24 ms  74.125.48.109 
  9    23 ms    24 ms    21 ms  216.239.46.246 
 10    39 ms    39 ms    55 ms  209.85.242.215 
 11    39 ms    39 ms    39 ms  209.85.254.243 
 12    39 ms    40 ms    96 ms  209.85.253.145 
 13    39 ms    39 ms    39 ms  yx-in-f147.1e100.net [74.125.45.147] 

Trace complete.

Note the second entry in there. Not only is the host name a student's computer, but the ip address doesn't exist. Dhcp shows that host as having a different address and you can't ping any 192.168.10.5. Yet somehow it's routing packets for us (and not very well, either — things are slow right now). The basic network routing table looks like this:

Destination     Subnet Mask     Gateway
---------------------------------------
Default Route   --              10.1.1.5 (our firewall)
10.0.0.0        255.0.0.0       --
192.168.8.0     255.255.252.0   --

© Server Fault or respective owner

Related posts about routing