traceroute output analysis; running eigrp

[gavin han]

Hi,

we are having some slow response issues for an application. below is trace route.

SW>traceroute 10.1.1.254

Type escape sequence to abort.

Tracing the route to 10.1.1.254

  1 192.168.8.9 0 msec 0 msec 0 msec

     192.168.1.1 0 msec 0 msec 0 msec

     192.168.8.9  4 msec 4 msec 4 msec

  2 172.30.1.1 400 msec *  400 msec

     172.30.4.1 500 msec *  500 msec

     172.30.1.1 400 msec *  400 msec 

  3  10.1.1.254    0 msec *  0 msec

in (1) and (2) : why are we seeing 192.168.8.9 and 172.30.1.1 twice (or why are we seeing 3 IPs in (1) & (2))? Why are we seeing so much delay in (2)?

we are running EIGRP and the test client (from which this traceroute output was taken) & the application servers are located at the site next to each other. I checked all interfaces across the path and we dont' have over utilization issues. we have plenty of bandwidth between these othe sites so we don't see any utilizatoin.

Thanks In Indvance...

Please advise.

Thanks...

[Richard Burts]

The first part of your question is why you are seeing 3 separate entries at each of the first 2 hops and this is easy to answer. You are seeing multiple entries in the response because of load sharing. At the first hop and at the second hop there are two equal cost paths toward the destination and the router/switch is doing load balancing /sharing.So it sends a traceroute probe packet over the first path and receives a response. Then it sends the second probe packet over the other path and receives a response. Then it sends the third probe packet over the first path and receives a response.

The other part of your question is why is there so much delay at hop 2. Unfortunately we do not have enough information about your network to anser this part of the question. If you can provide us with more information about this we might be able to provide better answers. What kind of router/switch is this? How are its interfaces configured? How much traffic is passing through this device?

HTH

Rick

[gavin han]

Hi Richard,

Thanks for your reply. in regards to your following response:

The first part of your question is why you are seeing 3 separate entries  at each of the first 2 hops and this is easy to answer. You are seeing  multiple entries in the response because of load sharing. At the first  hop and at the second hop there are two equal cost paths toward the  destination and the router/switch is doing load balancing /sharing.So it  sends a traceroute probe packet over the first path and receives a  response. Then it sends the second probe packet over the other path and  receives a response. Then it sends the third probe packet over the first  path and receives a response.

>> does are those "traceroute" probe packets at each of sent by that perticular hope or are they sent by the client that is doing traceroute?