I have found serveral examples where the last tracert hop is shown twice but not exactly an outlput like I've got here: The network setup look like that: enter image description here

Between the two sophos UTM firewalls and there is a site-to-site tunnel that routes the two networks and through the tunnel. Everything works fine but the weird tracrt output insecures me a little. The tracrt command
tracrt XXX.domain.local
is executed from the laptop
Outputis the following:

enter image description here

Thanks in advance for your opinion!

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin Dec 14 '19 at 18:15

Seems normal to me.

  • First hop: left site Sophos router
  • second hop : right site Sophos router
  • Third hop : should be , I.E layer 3 switch interface connected to the Sophos device, but it seems it is configured to not respond to traceroute coming on this interface
  • fourth hop : target computer

Routers respond to traceroute (by default) with the IP address of the interface on which the trace is received.

So is likely the IP address of the tunnel interface of the Sophos device on the right site.

| improve this answer | |
  • Hi, thanks for your response. The second line of the output shows which is the final destination. That is confusing for me. The rest seems plausible the layer3 switch won't respond to traceroute. – Totze1982 Jan 10 '19 at 9:10
  • @Totze1982 see my edit. – JFL Jan 10 '19 at 9:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.