OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: Update 3: the plot thickens.
From: Gerald Richter (richterecos.de)
Date: Tue Mar 21 2000 - 09:34:29 CST


>
> Can you run mtr or traceroute from your end so I have more accurate
> estimates of round-trip times? The bogus packets come from something
> within 4.5 ms round-trip time, so it can't be far from your machine.
>
rt-h1:~ # traceroute spike.porcupine.org
traceroute to spike.porcupine.org (168.100.189.2), 30 hops max, 40 byte
packets
 1 gw-nacamar.ecos.de (195.52.11.1) 1 ms 1 ms 2 ms
 2 195.52.15.45 (195.52.15.45) 5 ms 5 ms 5 ms
 3 gw1-mz.tap.de (194.162.200.65) 8 ms 5 ms 8 ms
 4 hs6-1.ffm10.nacamar.net (194.112.20.241) 16 ms 30 ms 21 ms
 5 atm3-0.sprintnap.nacamar.net (194.112.25.131) 96 ms 101 ms 122 ms
 6 sprint-nap.att.net (192.157.69.15) 116 ms 103 ms 99 ms
 7 gbr2-p02.n54ny.ip.att.net (192.205.32.37) 104 ms 117 ms 172 ms
 8 ar10-a300s1.n54ny.ip.att.net (12.123.0.217) 105 ms 128 ms 145 ms
 9 12.125.56.194 (12.125.56.194) 164 ms 194 ms 256 ms
10 border11.ge3-0-bbnet2.nyc.pnap.net (209.191.128.145) 202 ms 153 ms
135 ms
11 cloud9-3.border11.nyc.pnap.net (216.223.47.6) 261 ms 167 ms 149 ms
12 ra8.cloud9.net (168.100.1.138) 157 ms 197 ms 271 ms
13 spike.porcupine.org (168.100.189.2) 350 ms 355 ms 301 ms

I would guess that it is gw1-mz.tap.de (same as hs1-0.mz0.nacamar.net if you
make the traceroute from your side) which is the cisco with IOS 12.08. More
than one mail told us that Ciscos 12.xx isn't stable

Gerald