Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sims
New Contributor III

mtr

Hi,

from the above output the second hope is the fortigate firewall , the loss is 98.2% , does it mean it has serious issue ? 

I dont have traffic shaping in firewall 

 

Thanks

7 REPLIES 7
boneyard
Valued Contributor

at first glance you would say something is wrong there.

 

but im not fully familiar with mtr so i don't know what exactly that means. it might be something is blocked and therefor lost which doens't have a real bad effect.

 

is this all you have or do you also experience other issues through this firewall?

emnoc
Esteemed Contributor III

MTR is not to be used. If you ping the target do you see packet lost?

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
sims
New Contributor III

Hi,

There is no packet loss 

Thanks

emnoc
Esteemed Contributor III

With MTR you can confirm if CoPP or other traffic policers are impacting the device. So these can mislead the operator.

 

Ken Felix

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
sims
New Contributor III

Hi,

From wireshark capture how can we understand a provider or firewall filtering the ip address ?

 

Thanks

rwpatterson
Valued Contributor III

Your firewall hop at 98% loss is before the ISP. You need to do more homework before involving them.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
sims
New Contributor III

Hi,

I think this is because of icmp rate limiting on the firewall . 

Thanks

Labels
Top Kudoed Authors