asa 9.0.1 , traceroute

[dm]

Hello!

I have host behind asa with static nat.

with asa 8.4 all is usual, but if i try to use 9.0.1 I get strange traceroute on this host:

traceroute www.ya.ru

traceroute to www.ya.ru (87.250.251.3), 30 hops max, 60 byte packets

1  www.yandex.ru (87.250.251.3)  3.467 ms  4.392 ms  4.387 ms

2  www.yandex.ru (87.250.251.3)  3.390 ms  3.374 ms  3.363 ms

3  www.yandex.ru (87.250.251.3)  16.842 ms  82.568 ms  83.255 ms

4  www.yandex.ru (87.250.251.3)  27.205 ms  27.214 ms  27.190 ms

5  www.yandex.ru (87.250.251.3)  28.244 ms  28.235 ms  28.225 ms

6  www.yandex.ru (87.250.251.3)  28.212 ms  25.733 ms  27.555 ms^C

Could you tell me what I have to change in configuration to get the same result in 9.0.1 as in 8.4?

Thank you!

[Marcin Latosiewicz · Accepted solution]

This is a known bug.

Have a look at:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCud21307

[dm]

thank you!

[anowell · Accepted solution]

You should also check this out...

https://supportforums.cisco.com/thread/2083669

[dm]

Thank you!

btw, got another problem with 9.0.1 today:

Dec 20 06:47:50 inetgw1 named[2679]: DNS format error from 88.80.32.3#53 resolving 162.128.192.247.213.in-addr.arpa/PTR for client 192.168.22.

252#57499: question section mismatch: got 247.128.192.247.in-addr.arpa/IN/PTR

and no reverse dns resoling for our ip addresses.

this was cased by:

policy-map type inspect dns migrated_dns_map_1

parameters

  message-length maximum client auto

  message-length maximum 512

existed since 7 time.

yet another bug :-)