--- Keith Robinson <[EMAIL PROTECTED]> wrote: > Hi, > > I have something bizarre happening: I serve some web > sites, including http://www.dynamiccompany.co.uk and > even though I've stopped apache (apachectl stop), I > can still ping the web site: > > [EMAIL PROTECTED]:~$ ping www.dynamiccompany.co.uk > PING dynamiccompany.co.uk (213.131.168.136): 56 data > bytes > 64 bytes from 213.131.168.136: icmp_seq=0 ttl=245 > time=27.8 ms > 64 bytes from 213.131.168.136: icmp_seq=1 ttl=245 > time=23.0 ms > > --- dynamiccompany.co.uk ping statistics --- > 2 packets transmitted, 2 packets received, 0% packet > loss > round-trip min/avg/max = 23.0/25.4/27.8 ms > [EMAIL PROTECTED]:~$ > > So, I do a traceroute (from a remote box): > > [EMAIL PROTECTED]:~$ traceroute www.dynamiccompany.co.uk > traceroute to dynamiccompany.co.uk > (213.131.168.136), 30 hops max, 38 byte packets > 1 172.20.103.254 (172.20.103.254) 9.735 ms > 25.230 ms 10.375 ms > 2 rdg-cam1-a-fa00.inet.ntl.com (213.105.91.49) > 10.078 ms 14.060 ms 12.956 ms > 3 bre-t2core-a-pos49.inet.ntl.com (62.253.64.165) > 10.900 ms 18.956 ms 50.684 ms > 4 bre-bb-a-so-330-0.inet.ntl.com (62.253.185.57) > 12.658 ms 13.755 ms 14.886 ms > 5 gfd-bb-b-so-700-0.inet.ntl.com (213.105.172.150) > 15.009 ms 15.474 ms 25.388 ms > 6 linx-ic-2-so-100-0.inet.ntl.com (62.253.185.74) > 18.645 ms 55.592 ms 15.737 ms > 7 linx4.newnet.co.uk (195.66.225.131) 20.428 ms > 16.976 ms 27.521 ms > 8 atm1.th.newnet.co.uk (212.87.77.21) 18.044 ms > 17.804 ms 20.383 ms > 9 atm1.cams.newnet.co.uk (212.87.77.154) 19.826 > ms 27.832 ms 19.748 ms > 10 my web server > > > Of these, only 172.20.103.254 is unknown > > whois 172.20.103.254: > > IANA (IANA-BBLK-RESERVED) > Internet Assigned Numbers Authority > 4676 Admiralty Way, Suite 330 > Marina del Rey, CA 90292-6695 > US > > Netname: IANA-BBLK-RESERVED > Netblock: 172.16.0.0 - 172.31.255.255 > > Coordinator: > Internet Corporation for Assigned Names and > Numbers (IANA-ARIN) [EMAIL PROTECTED] > (310) 823-9358 > > Domain System inverse mapping provided by: > > BLACKHOLE-1.IANA.ORG 192.0.32.18 > BLACKHOLE-2.IANA.ORG 192.0.32.19 > > These blocks are reserved for special purposes. > Please see RFC 1918 for additional information. > > So, are ntl or newnet (where the box is located) > caching (aggressively) or is there a different > issue? Can anybody else ping > www.dynamiccompany.co.uk (who aren't with ntl) - > this could at least remove ntl from the equation. > > Any thoughts? I'm a bit stumped. > > All help greatly appreciated. > > Keith > > > -- > To UNSUBSCRIBE, email to > [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] >
Ping is ICMP protocol. Web servers use http protocol. Pinging that name first uses DNS ( either UDP or TCP ) to resolve that name to a number. So unless you took down the box, or disconnected it from the 'net, of course ping will work. Ping doesn't care about the fact that you no longer have a web server listening on port 80. Some implementations of traceroute use icmp, so that's why it works too. Even if you "killed" the domain name to IP address mapping, it could take a couple of days for it to be flushed from various DNS servers around the 'net. ===== [EMAIL PROTECTED] Hacking is a "Good Thing!" See http://www.tuxedo.org/~esr/faqs/hacker-howto.html __________________________________________________ Do You Yahoo!? LAUNCH - Your Yahoo! Music Experience http://launch.yahoo.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
