Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 5254 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ping

onward

Is there a way to ping from an XG without the 1 second delay between pings and also to receive a visual indicator on packet loss other than just the missing sequence numbers?  Being able to push out pings as fast as the receiving device can respond from our non-Sophos routers & firewalls has been a valuable troubleshooting tool for isolating both lan & isp issues.  Semi-related to this question: I have not yet worked with a RED, do those support the same local ping & traceroute diagnostics as an XG?



This thread was automatically locked due to age.
Parents
  • 0

    Deployed,

    can you share your ping output? The delay is related to how many "routes" it traverses and if an IPS rule is enabled.

    RED devices are controlled by XG so you can allow ping from RED zones. From RED network then you can ping another devices to a remote network and vice-versa.

    Regards

Reply
  • 0

    Deployed,

    can you share your ping output? The delay is related to how many "routes" it traverses and if an IPS rule is enabled.

    RED devices are controlled by XG so you can allow ping from RED zones. From RED network then you can ping another devices to a remote network and vice-versa.

    Regards

Children
  • 0 in reply to lferrara

    pinging lan device from non-sophos router:

    ping 1.1.1.1 repeat 1000
    Type escape sequence to abort.
    Sending 1000, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!
    Success rate is 100 percent (1000/1000), round-trip min/avg/max = 1/2/8 ms



    pinging same lan device from XG230 for same duration of time:

    console> ping 1.1.1.1
    PING 1.1.1.1 (1.1.1.1): 56 data bytes
    64 bytes from 1.1.1.1: seq=0 ttl=64 time=0.198 ms
    64 bytes from 1.1.1.1: seq=1 ttl=64 time=0.119 ms
    64 bytes from 1.1.1.1: seq=2 ttl=64 time=0.120 ms
    64 bytes from 1.1.1.1: seq=3 ttl=64 time=0.198 ms
    ^C
    --- 1.1.1.1 ping statistics ---
    4 packets transmitted, 4 packets received, 0% packet loss
    round-trip min/avg/max = 0.119/0.158/0.198 ms



    pinging an isp gateway from non-sophos firewall:

     ping 2.2.2.2 repeat 500
    Type escape sequence to abort.
    Sending 500, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    !!!!!!!!!!
    Success rate is 100 percent (500/500), round-trip min/avg/max = 1/1/10 ms

     

    pinging an isp gateway from XG230 for same duration of time:

    console> ping 3.3.3.3
    PING 3.3.3.3 (3.3.3.3): 56 data bytes
    64 bytes from 3.3.3.3: seq=0 ttl=63 time=0.806 ms
    64 bytes from 3.3.3.3: seq=1 ttl=63 time=0.654 ms
    64 bytes from 3.3.3.3: seq=2 ttl=63 time=0.785 ms
    64 bytes from 3.3.3.3: seq=3 ttl=63 time=0.677 ms
    ^C
    --- 3.3.3.3 ping statistics ---
    4 packets transmitted, 4 packets received, 0% packet loss
    round-trip min/avg/max = 0.654/0.730/0.806 ms

     

     

    packet loss example pinging an internet destination from non-sophos router or firewall:

    ping 8.8.8.8 repeat 500

    Type escape sequence to abort.

    Sending 500, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:

    !.!!!!!!!.!!!.!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!

    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!.!!!!!!!!!!!!!

    !!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!

    !!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!.!!!!!.!!!!!!!!!!!!!!!!!!!!!.

    !!.!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!..!!!.!.!!!!!!!!!!.

    !!.!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!.!.!!!!!!!!

    !!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!..!!!!!!!!.!!!!!!!!!!

    !!!!!!!!!!

    Success rate is 93 percent (466/500), round-trip min/avg/max = 8/9/16 ms

     

     

    packet loss example pinging from XG230:

    console> ping 1.1.1.1
    PING 1.1.1.1 (1.1.1.1): 56 data bytes
    64 bytes from 1.1.1.1: seq=0 ttl=64 time=9.034 ms
    64 bytes from 1.1.1.1: seq=1 ttl=64 time=0.171 ms
    64 bytes from 1.1.1.1: seq=2 ttl=64 time=0.153 ms
    64 bytes from 1.1.1.1: seq=3 ttl=64 time=0.194 ms
    64 bytes from 1.1.1.1: seq=4 ttl=64 time=0.161 ms
    64 bytes from 1.1.1.1: seq=5 ttl=64 time=0.187 ms
    64 bytes from 1.1.1.1: seq=6 ttl=64 time=0.173 ms
    64 bytes from 1.1.1.1: seq=7 ttl=64 time=0.159 ms
    64 bytes from 1.1.1.1: seq=8 ttl=64 time=0.198 ms
    64 bytes from 1.1.1.1: seq=9 ttl=64 time=0.182 ms
    64 bytes from 1.1.1.1: seq=10 ttl=64 time=0.189 ms
    64 bytes from 1.1.1.1: seq=11 ttl=64 time=0.167 ms
    64 bytes from 1.1.1.1: seq=12 ttl=64 time=0.194 ms
    64 bytes from 1.1.1.1: seq=13 ttl=64 time=0.312 ms
    64 bytes from 1.1.1.1: seq=14 ttl=64 time=0.162 ms
    64 bytes from 1.1.1.1: seq=15 ttl=64 time=0.188 ms
    64 bytes from 1.1.1.1: seq=16 ttl=64 time=0.189 ms
    64 bytes from 1.1.1.1: seq=17 ttl=64 time=0.163 ms
    64 bytes from 1.1.1.1: seq=18 ttl=64 time=0.187 ms
    64 bytes from 1.1.1.1: seq=19 ttl=64 time=0.187 ms
    64 bytes from 1.1.1.1: seq=20 ttl=64 time=0.244 ms
    64 bytes from 1.1.1.1: seq=21 ttl=64 time=0.200 ms
    64 bytes from 1.1.1.1: seq=22 ttl=64 time=0.203 ms
    64 bytes from 1.1.1.1: seq=23 ttl=64 time=0.238 ms
    64 bytes from 1.1.1.1: seq=24 ttl=64 time=0.194 ms
    64 bytes from 1.1.1.1: seq=102 ttl=64 time=2.089 ms
    64 bytes from 1.1.1.1: seq=103 ttl=64 time=0.334 ms
    64 bytes from 1.1.1.1: seq=104 ttl=64 time=0.203 ms
    64 bytes from 1.1.1.1: seq=105 ttl=64 time=0.231 ms
    64 bytes from 1.1.1.1: seq=106 ttl=64 time=0.196 ms
    64 bytes from 1.1.1.1: seq=107 ttl=64 time=0.203 ms
    64 bytes from 1.1.1.1: seq=108 ttl=64 time=0.191 ms
    64 bytes from 1.1.1.1: seq=109 ttl=64 time=0.189 ms
    ^C
    --- 1.1.1.1 ping statistics ---
    110 packets transmitted, 33 packets received, 70% packet loss
    round-trip min/avg/max = 0.153/0.523/9.034 ms