TCP / UDP packets not reaching destination

Hi all,
I have an ASR at the hub of 3 different routing domains.
I have two OSPF processes and one BGP process all on the same ASR.
BGP routes are redistributed in to both OSPF processes and vice versa. Plus, between the two OSPF processes, routes are also redistributed. Summary addresses are configured at the ASBR before the routes are injected in to Area 0 on each OSPF process.
ICMP from a source host in one OSPF process to a destination in the BGP process works fine, but any TCP traffic hangs awaiting a SYN/ACK.
I need to prove that the router is routing the packet toward the egress interface and that the packet is leaving the router. I was wondering if there were any debug commands that I can restrict to a particular host IP so that it does not bring the router down.
I know about Embedded Packet Capture, but unfortunately the IOS-XE version that I am running is not new enough so we do not have EPC on our ASR.
I appreciate that I have given only limited information.
Any advice appreciated.
Thanks
Mario

Mario
If you don't want to risk debug then i always used a basic but pretty reliable method ie. acls.
If you create an extended acl with the first line allowing the source IP of the host to any and then a second line with a "permit ip any any" and then apply it outbound to the egress interface it should show if the packets are being routed correctly and sent on towards the destination.
Obviously the "permit ip any any" line is very important
Edit - i haven't used the ASRs so it is possible they process all their acls in hardware in which case the hits may not show as they don't always on L3 switches that process acls in hardware.
So bear that in mind.
Jon

Similar Messages

Sent messages not reaching destination

Mail sent through .mac account does not reach destination, but everything looks completely normal. Messages sent using mail but from another mail account reach their destinations just fine. I still have tons of space on my .mac mail account and absolutely no error messages are appearing. Most grateful if anyone has a clue about what's going on.
Thanks, SP

hi jim, thanks for the reply.
yes, i tried sending mail to myself, also at a yahoo acct... it seems to be sent (doesn't bounce) but never reaches destination. The only way i can make it work is not to use mac.com as my outgoing server (i have to use the server of my local provider) and not to activate ssl sockets in mail preferences... naturally no pw check etc.
the annoying thing is that Mail doesn't tell me when it's not working, it saves the messages as sent but doesn't deliver them.
any ideas?
thanks again, sp

E-mailed photos not reaching destination

Hi,
E-mailed photos not reaching destination
. Can you help?

DCAINTLRE
If you have Premiere Elements, then your question relates to Premiere Elements via the Elements Organizer that comes with it.
And, as we know, Photo Email is an Elements Organizer feature found under the Elements Organizer Share/Photo Mail.
What version of Premiere Elements do you have and on what computer operating system is it running?
How far are you getting in the Photo Mail feature:
a. Do you get your created photo mail and see the email with its active Send button ready for you to hit the Send button?
b. If so, after you press the Send button, does the email appear to have been sent...even if you do not see a specific message saying
message sent? To verify that the message was sent, in the Elements Organizer Find Menu, go to By History/Emailed to to confirm
the sending.
Have you checked with the recipients of your Photo Mail to make sure that your sending is not ending up in the recipient's email junk
folder? Have you troubleshooted by sending a Photo Mail to yourself?
What have you set up as Email Client in the Elements Organizer preferences?
Please review and consider and then let us know the outcome.
Thank you.
ATR

Email is 'Sent' but does not reach destination - Please Help

Hi Guys,
Need some help with this. I have recently discovered that all emails I have been sending from Mail over the last month or so have not reached their destinations.
I get no error messages when sending from Mail - the email is dispatched as usual, the sound is heard and mail deposited in my 'Sent' folder. I have tested this by emailing myself with no joy.
Interestingly, the 'webmail' facility via the internet works OK and emails are all received. So looks like the problem lies at my end.
Have checked the settings for the outgoing mail server (my current Portugal ISP) and they seem OK. I do not recall having touched anything here.
The mail account is one of those free POP mail accounts with my old UK ISP which I have continued to use successfully out here since august...that is until now!
I am using Port 25 without SSL and no authentication - everything as before. Have already tried changing the port to those mentioned in similar threads but nothing gives.
Any ideas would be greatly appreciated!
Many thanks
1.33GHz Powerbook G4 Mac OS X (10.4.2)
1.33GHz Powerbook G4 Mac OS X (10.4.2)

Hi Paulo.
If Mail puts the message in the Sent mailbox, that means Mail has got confirmation from the SMTP server that the message will be delivered. Whether the SMTP server actually does what it promised, or the message is filtered out by the recipient’s incoming server for some reason, is another story that Mail can do nothing about.
Interestingly, the 'webmail' facility via the internet works OK and
emails are all received. So looks like the problem lies at my end.
Sending messages via webmail is not the same as sending them via SMTP. If the problem is at your end, it’s at the server-side part of your end; more specifically, at the SMTP server part...

Outlook 2013 sent email not reaching destination

This is a first for me!
Since early yesterday morning any email sent from Outlook 2013 (pop3) does not reach its destination that includes btinternet addresses.
Outlook receive works on messages coming from other clients.
Outlook send appears to work as messages go from Outbox to Sent Mail.
Test Message in Outlook settings appears to work but no Outlook test message received.
Email sent from the web client works.
No PC settings have changed.
Outlook settings are correct (mail.btinternet.com, etc).
First line Helpdesk can’t see anything wrong.
I have the feeling that something has changed in the background with servers or the move.
Can this be pointed towards second line support?
Solved!
Go to Solution.

Can you send and receive with BTMail via webmail?
If everything on your Outlook account is otherwise working and nothing has changed at your end I would leave it for a day or two to see if it clears itself.
The settings for BTMail are here if you want to re-check them.
http://bt.custhelp.com/app/answers/detail/a_id/44917/kw/bt%20mail/c/346,6588,6591

Mail sent does not reach destination

I am able to send mail from smtp.mac.com, or at least that's what it looks like, but the mail does not reach its destination. I tested it on myself. I have two accounts, .mac and another one. I sent mail from .mac to my other account and it didn't reach.
The problem started a few hours back. I got the typical "cannot send mail from this server ...." error message and I changed servers. Usually, it used to work with this change, but this time around it didn't. I deleted all servers that I didn't need, checked the connection doctor - it's connecting fine to the Internet, the activity Viewer shows the mail being sent. But, the mail does not reach where it is sent.
I don't have problems with my other mail account - just .mac.com.
Can anybody help?
PB G4 Mac OS X (10.4.7)

A message is either sent or not sent and if not successfully sent for whatever reason, the message will remain in the Outbox mailbox and will not be moved to the account's Sent mailbox. If a sent message is available in the account's Sent mailbox, this indicates the message was successfully sent.
A successfully sent message is either accepted or rejected by the recipient's incoming mail server and if not accepted by the recipient's incoming mail server for whatever reason, you will receive a return email error message from the recipient's incoming mail server indicating why the message was not accepted.
Sent messages are usually received almost instantly for the most part but not always. Successfully sent messages do not take a straight line from the SMTP server used for the account to the recipient's incoming mail server. There can be delays along the way or a temporary problem with the recipient's incoming mail server.

IDOC not reaching destination system

Hello,
I am trying to send DOCMAS type IDOC from one SAP sys to another SAP sys.The IDOC has the status 03 (The IDoc was sent to an SAP system or an external program via a transactional RFC) but i dont see the IDOC in the target sys.
Please let me know what could have gone wrong.
Thanks,
Rakesh.

Hello Rakesh More ,
First let us know how you corrected the previous error???. What was wrong?
Then talk about the next issue.
If you maintain properly the Inbound IDOC partner profile this error should not come. Make sure you have the below things set-up properly:-
1) In the inbound IDOC in the destination system there should be a partner receiver in the IDOC control data. Make sure you have maintained the partner profile for that partner and for the partner type as well.
2) For the partner make sure you have maintained the proper inbound mesaage type and process code properly.
Thanks,
Greetson
Edited by: Greetson Shunmugasundaram on Aug 1, 2011 9:47 PM

SGE2010P - DHCP Relay - offer packet not reaching host

I have an SGE2010P in L3 mode. I set up 2 vlans, 1 & 5. Vlan 1 has an interface of 10.0.3.252; Vlan 5 is at 10.0.10.9. I have defined the DHCP at 10.0.3.4 (on vlan 1) and enabled DHCP Interface for vlan 5. Put switch port g28 in access mode on vlan 5 and connected client machine. Set up wireshark on both DHCP a server and client. DHCP server is receiving the DHCP discovery packet with the correct relay agent address (10.0.10.9), and it sends back an offer packet to that address, but it is never received by the host machine. What am I missing?

Hello,
DHCP server typically is on subnet of one of the switch IP interface. Thus there si no need to indicate where the server is however you have to indicate from which VLAN DHCP requests are relayed. For example:
VLAN 1 - switch IP 192.168.1.25/24
DHCP server is on VLAN 1 with IP 192.168.1.1/24
Other VLANs:
VLAN 5 IP address 192.168.5.254/24
VLAN 10 IP address 192.168.10.254/24
enabling DHP relay from VLAN 5 and VLAN 10 is required.
Please check IF you have IP addresses on the switch of other VLANs 5 and 10
Regards,
Aleksandra

Sharing emails not reaching destination

Hi,
Buzzword is failing to send on the share requests I am sending out to co-editors. None of the emails I send out are received. Can someone help?

Hi Richard,
I believe we were able to offer a suggestion - to use the "Invite Again" feature - via email. This was most likely caused by a spam filter issue on the recipients end.
Let us know if it continues to be an issue after using "Invite Again".
Best,
Michelle

FTP to file server - file not reached to file server but in XI success

Hi
Scenario is
XI is picking file from SAP and sending to a file server. In XI ,communication channel and sxi_moni shows message transferred successfully.
But the file server guys din't receive any file. Can any one tell where the message can be lost. If file is not reaching destination then how come in XI its showing SUCCESSFUL message.
Regards

Hi,
Your communication channel is not able to connect with the FTP sever.
Check in RWB the communication channel log also user id, password mentioned in communication channel.
Check whether that user has authorization to create file on FTP sever.

Asp drop - First TCP packet not SYN (tcp-not-syn)

I have many tcp-not-syn:
First TCP packet not SYN (tcp-not-syn) 46841247
For sure it is not a routing issue cause ie 10.32.3.230 usually can connect to 192.168.16.2 which is a proxy server. Sometimes it can't and I get the
tcp-not-syn error. So after a capture I got the following,
ASA# capture asp-drop type asp-drop tcp-not-syn
ASA# sh capture asp-drop | i 10.32.3.230
2397: 16:11:31.904295 802.1Q vlan#8 P0 10.32.3.230.2322 > 192.168.16.2.8080: R 556133793:556133793(0) win 0
2398: 16:11:31.905272 802.1Q vlan#8 P0 10.32.3.230.2322 > 192.168.16.2.8080: R 556133793:556133793(0) win 0
2400: 16:11:31.908583 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2401: 16:11:31.908613 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2402: 16:11:31.908629 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2403: 16:11:31.908659 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2404: 16:11:31.908766 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2405: 16:11:31.908796 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2406: 16:11:31.908812 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) ack 4258924744 win 0
2407: 16:11:31.909071 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2408: 16:11:31.909102 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2409: 16:11:31.909132 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2410: 16:11:31.910490 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2411: 16:11:31.910521 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2412: 16:11:31.910551 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2413: 16:11:31.910566 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2414: 16:11:31.911192 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2415: 16:11:31.911207 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2416: 16:11:31.911238 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2417: 16:11:31.915205 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2418: 16:11:31.915235 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2419: 16:11:31.915296 802.1Q vlan#8 P0 10.32.3.230.2321 > 192.168.16.2.8080: R 1839687588:1839687588(0) win 0
2420: 16:11:31.915327 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2421: 16:11:31.915357 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2422: 16:11:31.915815 802.1Q vlan#8 P0 10.32.3.230.2320 > 192.168.16.2.8080: R 55902087:55902087(0) win 0
2432: 16:11:33.102426 802.1Q vlan#8 P0 10.32.3.230.2317 > 192.168.16.2.8080: R 4189536219:4189536219(0) win 0
2433: 16:11:33.102457 802.1Q vlan#8 P0 10.32.3.230.2317 > 192.168.16.2.8080: R 4189536219:4189536219(0) win 0
2434: 16:11:33.102487 802.1Q vlan#8 P0 10.32.3.230.2317 > 192.168.16.2.8080: R 4189536219:4189536219(0) win 0
syslog message says:
deny tcp (no connection) from 10.32.3.78/1646 to 192.168.16.2/8080 flags RST on interface inside
The question is how can I define it is:
1. the proxy 192.168.16.2 itself is too slow responding to the syn packet sent from the client 10.32.3.78
2. a reset is sent by the proxy 192.168.16.2 and then forwarded by the ASA to the client 10.32.3.78
3. an idle timeout tuning needed on firewall
4. anything else
Thanks

Hi,
Since it is a RST packet coming from client IP destined to proxy server IP on ASA's interface (of course with no associated connection in ASA state table), ASA will drop it as first tcp packet not syn.
When a packet arrives on ASA, it checks to see if it belongs to an existing flow, if not, it has to be a new connection but since SYN flag is not set here, it gets dropped under above reason code.
Now, you would probabaly want to capture the entire traffic stream from client to server on ASA interface to understand what caused those resets. May be client sent some new requests (SYN's) and proxy was too busy to respond. Again, complete capture in pcap would be needed for further analysis.
Regards,
Sourav Kakkar

Some emails not reaching their destination

Since moving from MobileMe to iCloud some emails are not reaching their destination.

the same way!
Some letters do not reach the destination with iPad iCloud mail. In iCloud they fall into the "Sent", but do not come to a different destination some letters.

Sent mails from CRM are not reaching to destination..

Hi experts, good afternoon.
I have configured an action to trigger an email when the document is saved. But the problem is action is shown as executed in transaction level, even in SCOT it is showing as completed but in SOST sent mails it is not shown and it is not reaching to my mail inbox also.
Please help me out in this regard. Please let me know what could be the problem.
Regards
Madhav

Hi Maddy,
I am facing the same issue. I was not able to see any of my entries in SOST. I went to the tab 'send status' in SOST and and clicked on the button 'Further' and selected 'Still Not Entered in Queue'. Now I can see it in SOST with status 'Still no entry in queue'.
Are you also facing the same problem? When you find the solution, please let me know.
Regards,
Neena

Not receiving UDP packet with Windows

Using a Windows 2000 Professional system I send a UDP packet (DatagramSocket()/DatagramPacket()) to a server, which returns a UDP packet on the same socket. Simple textbook stuff! The Java application works fine on a Linux machine, but catches an SocketException with "socket closed" message from the receive() method when run on a Windows 2000 machine. What gives? I have disabled the security checks and still can't get the packet. Any suggestions? (other than ditch Windows)

I got the same problem. I ran the identical program on WinXP and no exception! What's the cause for this? How to avoid it?
Thanks,

Routing non-TCP/UDP traffic while using FWLB on CSS 11503s

Hello all,
I've been tasked to setup up FWLB with CSS 11503's as shown below. The issue is that intranet workstations use VPN client software when connecting to certain sites through the Internet and other times they use http or https (for connection to different sites). Because no flow is setup for ipsec and ECMP uses per packet routing for non TCP/UDP traffic, I'm concerned that load balancing through the firewalls will occur on a per packet basis. If that is true, stateful inspection in the firewalls will block asymmetrical traffic flows.
Is my understanding correct? And, if so, is there a way to configure the CSS units to deal with this?
Thanks in advance.
(sorry for the dots in the drawing but the spaces kept getting deleted)
.| Internet |
..........|
.| CSS-outside |
.............|
........|...............|
.| FW1 |.....| FW2 |
.......|................|
............|
.| CSS-inside |
............|
.| Intranet |

for non-flowy traffic like IPSEC, we use a hash algorithm to decide where to send the traffic.
So, it's not per packet loadbalancing.
The same source/destination ip/port will always go to the same firewall.
Gilles.

TCP / UDP packets not reaching destination

Similar Messages

Maybe you are looking for