Mailing List Archive: Cisco: NSP

Can Ping Websites but cannot browse.

Index | Next | Previous | View Threaded

bluffmaster4hearts at gmail

Nov 2, 2009, 3:35 AM

Post #1 of 14 (228 views)
Permalink

Can Ping Websites but cannot browse.

Dear All,

I have a strange situation, I can browse the websites but cannot browse
them.

Please share your finding with me.

Thanks and Regards,

Bharath
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

p.mayers at imperial

Nov 2, 2009, 4:34 AM

Post #2 of 14 (222 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

bharath kondi wrote:
> Dear All,
>
> I have a strange situation, I can browse the websites but cannot browse
> them.

Check for MTU issues
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

alex at digriz

Nov 2, 2009, 6:26 AM

Post #3 of 14 (221 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>
> bharath kondi wrote:
>>
>> I have a strange situation, I can browse the websites but cannot browse
>> them.
>
> Check for MTU issues
>
It is a pretty impressive to screw up non-SSLed traffic with an MTU
issue, I would be more inclinded to think it's something else.

Real Men(tm) use tcptraceroute:
----
alex[at]chipmunk:~$ tcptraceroute www.google.com 80
Selected device bond0, address 195.195.131.226, port 47429 for outgoing packets
Tracing the path to www.google.com (209.85.227.106) on TCP port 80 (www), 30 hops max
1 no-reverse-defined.ja.net (195.195.131.225) 0.324 ms 0.243 ms 0.241 ms
2 so-1-3-2.read-sbr1.ja.net (146.97.34.157) 0.762 ms 0.752 ms 0.750 ms
3 so-6-0-0.lond-sbr3.ja.net (146.97.33.166) 2.020 ms 2.047 ms 2.191 ms
4 te1-1.lond-ban3.ja.net (146.97.35.98) 2.345 ms 2.236 ms 2.142 ms
5 google.lond-ban3.ja.net (193.62.157.30) 2.206 ms 2.228 ms 2.218 ms
6 209.85.252.76 8.794 ms 2.399 ms 2.358 ms
7 72.14.232.134 8.328 ms 8.423 ms 8.225 ms
8 216.239.49.45 8.280 ms 8.370 ms 8.287 ms
9 209.85.243.93 13.284 ms 8.821 ms 17.787 ms
10 * * *
11 * * *
12 wy-in-f106.1e100.net (209.85.227.106) [open] 9.765 ms 9.779 ms 9.753 ms
----

....they also give a descriptive breakdown of the problem they are
having, what their setup is, any logs and also what they have tried
already. However this is reply to Phil not the OP... :)

Cheers

--
Alexander Clouter
.sigmonster says: Am I SHOPLIFTING?

_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

p.mayers at imperial

Nov 2, 2009, 7:37 AM

Post #4 of 14 (221 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Alexander Clouter wrote:
> Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>> bharath kondi wrote:
>>> I have a strange situation, I can browse the websites but cannot browse
>>> them.
>> Check for MTU issues
>>
> It is a pretty impressive to screw up non-SSLed traffic with an MTU
> issue, I would be more inclinded to think it's something else.

That directly contradicts my experience. I have observed widespread
failures with ordinary HTTP traffic when MTU problems occur.

It depends very much on the website you're hitting and their
architecture, as well as the nature of the MTU problem.
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

oliver.gorwits at oucs

Nov 2, 2009, 8:25 AM

Post #5 of 14 (216 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

bharath kondi wrote:
> I have a strange situation, I can browse the websites but cannot browse
> them.

Could there be a near-dead media converter in your path? I have seen
this happen once or twice. If it feels like you could fry an egg on
it, swap it out.

regards,
oliver.
- --
Oliver Gorwits, Network and Telecommunications Group,
Oxford University Computing Services
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkrvCBYACgkQ2NPq7pwWBt60lwCePLmcixy+asBhbPsqaXlngbXK
+O4AoJr9LDUYM1Cx52Me3v1y0y77derD
=EKzP
-----END PGP SIGNATURE-----
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

gsgranados at comcast

Nov 2, 2009, 8:29 AM

Post #6 of 14 (216 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

I second that. I've seen this as an MTU problem more times than not.

----- Original Message -----
From: "Phil Mayers" <p.mayers[at]imperial.ac.uk>
To: "Alexander Clouter" <alex[at]digriz.org.uk>
Cc: <cisco-nsp[at]puck.nether.net>
Sent: Monday, November 02, 2009 7:37 AM
Subject: Re: [c-nsp] Can Ping Websites but cannot browse.

> Alexander Clouter wrote:
>> Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>>> bharath kondi wrote:
>>>> I have a strange situation, I can browse the websites but cannot browse
>>>> them.
>>> Check for MTU issues
>>>
>> It is a pretty impressive to screw up non-SSLed traffic with an MTU
>> issue, I would be more inclinded to think it's something else.
>
> That directly contradicts my experience. I have observed widespread
> failures with ordinary HTTP traffic when MTU problems occur.
>
> It depends very much on the website you're hitting and their architecture,
> as well as the nature of the MTU problem.
> _______________________________________________
> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

prospanogi at gmail

Nov 2, 2009, 8:51 AM

Post #7 of 14 (216 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Bharath,

try to ping the site you cannot browse with increasing icmp payloads and see
if/when you stop receiving echo replies.
This could give a final idea about the nature of the problem.

Regards,

Giuseppe

On Mon, Nov 2, 2009 at 5:29 PM, Scott Granados <gsgranados[at]comcast.net>wrote:

> I second that. I've seen this as an MTU problem more times than not.
>
> ----- Original Message ----- From: "Phil Mayers" <p.mayers[at]imperial.ac.uk>
> To: "Alexander Clouter" <alex[at]digriz.org.uk>
> Cc: <cisco-nsp[at]puck.nether.net>
> Sent: Monday, November 02, 2009 7:37 AM
> Subject: Re: [c-nsp] Can Ping Websites but cannot browse.
>
>
>
> Alexander Clouter wrote:
>>
>>> Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>>>
>>>> bharath kondi wrote:
>>>>
>>>>> I have a strange situation, I can browse the websites but cannot browse
>>>>> them.
>>>>>
>>>> Check for MTU issues
>>>>
>>>> It is a pretty impressive to screw up non-SSLed traffic with an MTU
>>> issue, I would be more inclinded to think it's something else.
>>>
>>
>> That directly contradicts my experience. I have observed widespread
>> failures with ordinary HTTP traffic when MTU problems occur.
>>
>> It depends very much on the website you're hitting and their architecture,
>> as well as the nature of the MTU problem.
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

cluestore at gmail

Nov 2, 2009, 9:25 AM

Post #8 of 14 (216 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

mturoute is your friend.....

http://www.elifulkerson.com/projects/mturoute.php

On Mon, Nov 2, 2009 at 6:34 AM, Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:

> bharath kondi wrote:
>
>> Dear All,
>>
>> I have a strange situation, I can browse the websites but cannot browse
>> them.
>>
>
> Check for MTU issues
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

berghauz at gmail

Nov 2, 2009, 10:42 AM

Post #9 of 14 (214 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Hello.

Did you care a mpls network? Maybe you need look forward on mpls mtu?
In any case, it's MTU problem.

WBR Aleksey Polyakoff ICQ:9001016
Ogden Nash <http://www.brainyquote.com/quotes/authors/o/ogden_nash.html> -
"The trouble with a kitten is that when it grows up, it's always a cat."

2009/11/2 bharath kondi <bluffmaster4hearts[at]gmail.com>

> Dear All,
>
> I have a strange situation, I can browse the websites but cannot browse
> them.
>
> Please share your finding with me.
>
> Thanks and Regards,
>
> Bharath
> _______________________________________________
> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

ploopster at gmail

Nov 2, 2009, 11:20 AM

Post #10 of 14 (214 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

bharath kondi wrote:
> Dear All,
>
> I have a strange situation, I can browse the websites but cannot browse
> them.
>
> Please share your finding with me.

That's often caused by MTU problems. Are you on an ADSL line?

Peace... Sridhar
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

ploopster at gmail

Nov 2, 2009, 11:22 AM

Post #11 of 14 (214 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Phil Mayers wrote:
> Alexander Clouter wrote:
>> Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>>> bharath kondi wrote:
>>>> I have a strange situation, I can browse the websites but cannot browse
>>>> them.
>>> Check for MTU issues
>>>
>> It is a pretty impressive to screw up non-SSLed traffic with an MTU
>> issue, I would be more inclinded to think it's something else.
>
> That directly contradicts my experience. I have observed widespread
> failures with ordinary HTTP traffic when MTU problems occur.
>
> It depends very much on the website you're hitting and their
> architecture, as well as the nature of the MTU problem.

One reason why it causes so many problems is that people sometimes
ignore (or drop in firewall) PMTUD messages.

Peace... Sridhar
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

cphillips at wbsconnect

Nov 2, 2009, 3:00 PM

Post #12 of 14 (206 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Thirded. I've seen this a lot as well.

Scott Granados wrote:
> I second that. I've seen this as an MTU problem more times than not.
>
> ----- Original Message ----- From: "Phil Mayers" <p.mayers[at]imperial.ac.uk>
> To: "Alexander Clouter" <alex[at]digriz.org.uk>
> Cc: <cisco-nsp[at]puck.nether.net>
> Sent: Monday, November 02, 2009 7:37 AM
> Subject: Re: [c-nsp] Can Ping Websites but cannot browse.
>
>
>> Alexander Clouter wrote:
>>> Phil Mayers <p.mayers[at]imperial.ac.uk> wrote:
>>>> bharath kondi wrote:
>>>>> I have a strange situation, I can browse the websites but cannot
>>>>> browse
>>>>> them.
>>>> Check for MTU issues
>>>>
>>> It is a pretty impressive to screw up non-SSLed traffic with an MTU
>>> issue, I would be more inclinded to think it's something else.
>>
>> That directly contradicts my experience. I have observed widespread
>> failures with ordinary HTTP traffic when MTU problems occur.
>>
>> It depends very much on the website you're hitting and their
>> architecture, as well as the nature of the MTU problem.
>> _______________________________________________
>> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp[at]puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

--
Chris Phillips
Director of Network Engineering & Peering Coordinator
WBS Connect
cphillips[at]wbsconnect.com
(866) WBS-CONX
(720) 259-8361 - direct
(303) 968-4383 - mobile
www.wbsconnect.com
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

dale.shaw+cisco-nsp at gmail

Nov 2, 2009, 4:18 PM

Post #13 of 14 (203 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Hi,

On Tue, Nov 3, 2009 at 1:26 AM, Alexander Clouter <alex[at]digriz.org.uk> wrote:
> It is a pretty impressive [read: hard/unusual -- Ed.] to screw up non-SSLed traffic with an MTU
> issue,

In "Opposite Land"? or in a land where IPSec and PPPoX don't exist? :-)

cheers,
Dale
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

alex at digriz

Nov 3, 2009, 12:39 AM

Post #14 of 14 (194 views)
Permalink

Re: Can Ping Websites but cannot browse. [In reply to]

Hi,

* Dale Shaw <dale.shaw+cisco-nsp[at]gmail.com> [2009-11-03 11:18:01+1100]:
>
> On Tue, Nov 3, 2009 at 1:26 AM, Alexander Clouter <alex[at]digriz.org.uk> wrote:
> > It is a pretty impressive [read: hard/unusual -- Ed.] to screw up non-SSLed traffic with an MTU
> > issue,
>
> In "Opposite Land"? or in a land where IPSec and PPPoX don't exist? :-)
>
Well at $ORK[-1] I was an ISP packet pusher and there all those 'factory
default'ing 1492 MTU routers that blocked all ICMP traffic used to drive
us mad. There regular HTTP traffic was always fine[1] as the request
always fitted with no problem within a single MTU...it was only when you
slapped on some SSL action (or tried to SMTP something about) that the
MTU issue would appear.

So 'opposite' land being CPE rather than core networking land...hence my
"you have to be a special person to have done this". Even the greatest
ICMP offenders of the Internet (financial institutions) just gave up
dealing with this crap and cranked all their servers to shunt their MTU
to 1000ish and tinker with the MSS on the inbound TCP SYN packet.

So...this is why I focused on the "cannot browse websites", I personally
am just stunned the helpfulness[2] of the group to such a vague
question. If any of the helldeskers here said that (which they often
do, *sigh*) I have to re-remind them with the public flaying... :-/

Cheers

[1] back in the day when you did not have honkingly large cookies, wtf?
[2] come on guys, I felt you were all much more on the ball the way you
handled http://marc.info/?l=cisco-nsp&m=125441497832189&w=2 :)

--
Alexander Clouter
.sigmonster says: A vivid and creative mind characterizes you.
_______________________________________________
cisco-nsp mailing list cisco-nsp[at]puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com