ICMPv6 measurements for Slovenian operators (ASNs)

Per-AS test of ICMPv6 Echo, ICMPv6 Type 2 (Packet Too Big), Time-Exceeded path responsiveness and TCP liveness, from three vantage points.

Vantage points: SLO host (6connect), NL host (go6lab) & ITA host (Karsolink). Generated 2026-05-30T10:57:59+00:00.

All countriesState of IPv6TopologySIXAboutipv6.si ↗ Sparky

How to read this table

open echo + 1500B both work (good) echo_only small echo ok, 1500B drops (PMTUD broken) ptb_only 1500B ok, small drops (rare) icmp_blocked ICMPv6 blocked, but TCP responds all_blocked probed host is silent on every protocol blocked_in_destination_as a real host was discovered but every probe is silent no_ipv6_implementation AS announces v6 but no IPv6 host was ever discovered transit_only_unreachable traceroute never enters the destination AS

Narrow-screen view: some columns are hidden so the table fits without horizontal scroll. Hidden here: Echo small, Echo 1500B, Last hop, min PMTU, Filter likely at, Origin AS + Vantage point. Open a row's Analysis for the full per-AS detail, or rotate to landscape / view on a wider screen for the complete table.

ASNHolderVantage pointClassificationEcho smallEcho 1500BLast hopmin PMTUFilter likely atTargetOrigin AS
AS2107ARNESPI/PARFC 4890 ✓RPKI ✓ 2/2ASPA -NL host (go6lab)open
Target: 2001:1470:8000::87 · aa.arnes.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.50%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.10%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:412.70%AS50673
Serverius-as
5* * *-90%-
6* * *-60%-
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.60%AS174
COGENT-174
8* * *-30%-
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
23.20%AS174
COGENT-174
10be4080.agr62.vie01.atlas.cogentco.com
2001:550:0:1000::8275:3252
22.80%AS174
COGENT-174
11be3189.rcr61.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:4ac5
29.50%AS174
COGENT-174
12be3191.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:e7a
29.40%AS174
COGENT-174
13* * *---
14rljtpl1.bb.arnes.si
2001:1470:a:74::b
30.90%AS2107
ARNES-NET
152001:1470:8000:713::230.00%AS2107
ARNES-NET
16kosuta-v6.arnes.si
2001:1470:8000:300::4
29.30%AS2107
ARNES-NET
17kanin.arnes.si
2001:1470:8000::87
29.40%AS2107
ARNES-NET
rate-limited: hop 5, hop 6, hop 8
4/4 28.7ms3/4 28.9ms17 ✓1500(none)
NS2001:1470:8000::87 aa.arnes.si
NS2001:1470:8000:53::44 b.dns.si
NS2001:1470:ff80::24 niobe.ijs.si
drv2001:1470:8000:40::121 cdn.arnes.si
drv2001:1470:8000::90 dns1.arnes.si
… +5 more
2001:1470:8000::87 aa.arnes.si NS
2001:1470:8000:53::44 b.dns.si NS
2001:1470:ff80::24 niobe.ijs.si NS
2001:1470:8000:40::121 cdn.arnes.si drv
2001:1470:8000::90 dns1.arnes.si drv
2001:1470:8000::89 dns2.arnes.si drv
2001:1470:8000:40::134 ftp.arnes.si drv
2001:1470:8000:43::24 git.arnes.si drv
2001:1470:8000:43::15:194 grafana.arnes.si drv
2001:1470:8000::110 imap.arnes.si drv
AS2107

What was measured. From NL host (go6lab) we tested AS2107 (ARNES-NET - ARNES) using aa.arnes.si (2001:1470:8000::87). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 3/4 1500 B; avg RTT 28.7/28.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (3/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 17 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was kanin.arnes.si [2001:1470:8000::87] in AS2107 (ARNES-NET). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (90%, AS174, COGENT-174), hop 6 (60%, AS174, COGENT-174), hop 8 (30%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS2107 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS2107 details →

SLO host (6connect)open
Target: 2001:1470:8000::87 · aa.arnes.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
0.5-AS8038
6CONNECT
32a03:a100:0:201:1::11.260%AS56635
XENYA
4rarnes1.six.si
2001:7f8:46::2107
8.10%AS2107
Arnes
5rljijs1.bb.arnes.si
2001:1470:a:75::b
0.90%AS2107
ARNES-NET
62001:1470:8000:712::21.60%AS2107
ARNES-NET
7kosuta-v6.arnes.si
2001:1470:8000:300::4
2.60%AS2107
ARNES-NET
8kanin.arnes.si
2001:1470:8000::87
3.10%AS2107
ARNES-NET
rate-limited: hop 3
4/4 1.4ms4/4 3.4ms8 ✓1500(none)
NS2001:1470:8000::87 aa.arnes.si
NS2001:1470:8000:53::44 b.dns.si
NS2001:1470:ff80::24 niobe.ijs.si
drv2001:1470:8000:40::121 cdn.arnes.si
drv2001:1470:8000::90 dns1.arnes.si
… +5 more
2001:1470:8000::87 aa.arnes.si NS
2001:1470:8000:53::44 b.dns.si NS
2001:1470:ff80::24 niobe.ijs.si NS
2001:1470:8000:40::121 cdn.arnes.si drv
2001:1470:8000::90 dns1.arnes.si drv
2001:1470:8000::89 dns2.arnes.si drv
2001:1470:8000:40::134 ftp.arnes.si drv
2001:1470:8000:43::24 git.arnes.si drv
2001:1470:8000:43::15:194 grafana.arnes.si drv
2001:1470:8000::110 imap.arnes.si drv
AS2107

What was measured. From SLO host (6connect) we tested AS2107 (ARNES-NET - ARNES) using aa.arnes.si (2001:1470:8000::87). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.4/3.4 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was kanin.arnes.si [2001:1470:8000::87] in AS2107 (ARNES-NET). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (60%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS2107 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS2107 details →

AS3212TelemachPI/PARFC 4890 ✓RPKI ✓ 4/4ASPA -NL host (go6lab)open
Target: 2a00:13db:0:6::11 · ns1.telemach.net · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.20%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.60%*AS203993
STEFFANN-DC-AS
3* * *---
4be1.core3.ams1.he.net
2001:470:e:5e::1
6.60%AS6939
HURRICANE
5be2.core4.fra1.he.net
2001:470:e:38::2
10.40%AS6939
HURRICANE
6be3.core2.fra2.he.net
2001:470:e:5a::1
10.30%AS6939
HURRICANE
7e0-33.core2.muc1.he.net
2001:470:0:2ef::2
14.60%AS6939
HURRICANE
82001:7f8:30:0:2:1:0:321227.00%-
9telemach-d-o-o.e0-66.core2.vie1.he.net
2001:470:1:ab3::2
26.20%AS6939
HURRICANE
102a00:13db:0:6::127.270%AS3212
TELEMACH
11ns1.telemach.net
2a00:13db:0:6::11
25.10%AS3212
TELEMACH
rate-limited: hop 10
4/4 26.1ms4/4 26.2ms11 ✓1500(none)
drv2a00:13db:0:6::11 ns1.telemach.net
drv2a00:13db:0:6::12 ns2.telemach.net
atl2a00:fc0:11:a000::16
hit2001:1688:fffc:11:101::1
hit2001:1688:fffc:11:101::2
… +5 more
2a00:13db:0:6::11 ns1.telemach.net drv
2a00:13db:0:6::12 ns2.telemach.net drv
2a00:fc0:11:a000::16 (external source) atl
2001:1688:fffc:11:101::1 (external source) hit
2001:1688:fffc:11:101::2 (external source) hit
2a00:13d9:100::1 (external source) hit
2a00:13d9:200::1 (external source) hit
2a00:13d9:300::1 (external source) hit
2a00:13d9:4e1::b (external source) hit
2a00:13d9:520::a (external source) hit
AS3212

What was measured. From NL host (go6lab) we tested AS3212 (TELEMACH - Telemach Slovenija d.o.o.) using ns1.telemach.net (2a00:13db:0:6::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.1/26.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 11 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.telemach.net [2a00:13db:0:6::11] in AS3212 (TELEMACH). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 10 (70%, AS3212, TELEMACH) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS3212 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS3212 details →

SLO host (6connect)open
Target: 2a00:13db:0:6::11 · ns1.telemach.net · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
0.50%*AS8038
6CONNECT
32a03:a100:0:201:1::10.930%AS56635
XENYA
42a00:fc0:4314:b::a2.20%AS3212
TELEMACH
52a00:13db:0:6::11.60%AS3212
TELEMACH
6ns1.telemach.net
2a00:13db:0:6::11
2.20%AS3212
TELEMACH
rate-limited: hop 3
4/4 1.3ms4/4 2.7ms6 ✓1500(none)
drv2a00:13db:0:6::11 ns1.telemach.net
drv2a00:13db:0:6::12 ns2.telemach.net
atl2a00:fc0:11:a000::16
hit2001:1688:fffc:11:101::1
hit2001:1688:fffc:11:101::2
… +5 more
2a00:13db:0:6::11 ns1.telemach.net drv
2a00:13db:0:6::12 ns2.telemach.net drv
2a00:fc0:11:a000::16 (external source) atl
2001:1688:fffc:11:101::1 (external source) hit
2001:1688:fffc:11:101::2 (external source) hit
2a00:13d9:100::1 (external source) hit
2a00:13d9:200::1 (external source) hit
2a00:13d9:300::1 (external source) hit
2a00:13d9:4e1::b (external source) hit
2a00:13d9:520::a (external source) hit
AS3212

What was measured. From SLO host (6connect) we tested AS3212 (TELEMACH - Telemach Slovenija d.o.o.) using ns1.telemach.net (2a00:13db:0:6::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.3/2.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.telemach.net [2a00:13db:0:6::11] in AS3212 (TELEMACH). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS3212 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS3212 details →

AS5435VelcomPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:23d0:0:1:0:1:1:1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
5.20%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.00%AS50673
Serverius-as
42a03:3f40::10:412.50%AS50673
Serverius-as
5* * *-80%-
6* * *-70%-
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.50%AS174
COGENT-174
8* * *---
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
24.20%AS174
COGENT-174
10be3935.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:274e
24.30%AS174
COGENT-174
11be3189.rcr61.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:4ac5
29.60%AS174
COGENT-174
12be3191.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:e7a
29.70%AS174
COGENT-174
132001:978:2:39::8:226.80%AS174
COGENT-174
142a02:d68:2:9::128.20%AS12778
SGN
152a02:d68:c:1002::227.60%AS12778
SGN
rate-limited: hop 5, hop 6
4/4 26.9ms4/4 27.2ms151500(none)
hit2a02:23d0:0:1:0:1:1:1
hit2a02:23d0:0:1:0:1:2:1
hit2a02:23d0:0:1::77
AS5435

What was measured. From NL host (go6lab) we tested AS5435 (VELCOM-AS - Velcom d.o.o) using (external source) (2a02:23d0:0:1:0:1:1:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.9/27.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 15 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a02:d68:c:1002::2 in AS12778 (SGN). The path never entered the destination network (AS5435 VELCOM-AS). Responses kept coming through and including AS12778 SGN; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS12778 SGN), not at it - AS12778 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (80%, AS174, COGENT-174), hop 6 (70%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS5435 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS5435 details →

SLO host (6connect)open
Target: 2a02:23d0:0:1:0:1:1:1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
1.40%*AS8038
6CONNECT
32a03:a100:0:201:1::11.230%AS56635
XENYA
42001:7f8:46::1:27781.70%AS51988
ARNES-SIX
52a02:d68:2:9::11.30%AS12778
SGN
62a02:d68:c:1002::22.70%AS12778
SGN
rate-limited: hop 3
4/4 1.6ms4/4 1.7ms61500(none)
hit2a02:23d0:0:1:0:1:1:1
hit2a02:23d0:0:1:0:1:2:1
hit2a02:23d0:0:1::77
AS5435

What was measured. From SLO host (6connect) we tested AS5435 (VELCOM-AS - Velcom d.o.o) using (external source) (2a02:23d0:0:1:0:1:1:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.6/1.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a02:d68:c:1002::2 in AS12778 (SGN). The path never entered the destination network (AS5435 VELCOM-AS). Responses kept coming through and including AS12778 SGN; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS12778 SGN), not at it - AS12778 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS5435 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS5435 details →

AS5603Telekom SlovenijePI/PARPKI ⚠ 11/12ASPA -NL host (go6lab)open
Target: 2a00:ee0:d::13 · ns3.siol.net · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.60%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.00%*AS203993
STEFFANN-DC-AS
3speed-ix.inter.link
2001:7f8:b7::a500:5405:1
2.90%-
4r4-ams1-nl.as5405.net
2a11:4140::10
24.90%AS5405
INTERDOTLINK
5r6-ams1-nl.as5405.net
2a11:4140::54
25.80%AS5405
INTERDOTLINK
6r4-fra3-de.as5405.net
2a11:4140::37
25.40%AS5405
INTERDOTLINK
7r2-vie2-at.as5405.net
2a11:4140::20
25.10%AS5405
INTERDOTLINK
8r2-vie1-at.as5405.net
2a11:4140::1e
25.10%AS5405
INTERDOTLINK
9r1-lju1-si.as5405.net
2a11:4140::38
25.50%AS5405
INTERDOTLINK
102a11:4142:2002::125.20%AS5405
INTERDOTLINK
11taurus-3.siol.net
2a00:ee0:d::13
25.90%AS5603
SIOL-NET
4/4 25.5ms4/4 25.8ms11 ✓1500(none)
cur2a00:ee0:d::13 ns3.siol.net
NS2a00:ee0:d::11 taurus-1.siol.net
NS2a00:ee0:e::11 taurus-2.siol.net
drv2a00:ee0:d::23 ns4.siol.net
atl2a00:ee2:4b03:c2ff:a62b:b0ff:fef1:7ca2
… +5 more
2a00:ee0:d::13 ns3.siol.net cur
2a00:ee0:d::11 taurus-1.siol.net NS
2a00:ee0:e::11 taurus-2.siol.net NS
2a00:ee0:d::23 ns4.siol.net drv
2a00:ee2:4b03:c2ff:a62b:b0ff:fef1:7ca2 (external source) atl
2a00:ee2:4b0d:3020:1:76ff:fec9:2eb5 (external source) atl
2a00:ee0:0:114::1 (external source) hit
2a00:ee0:0:114::2 (external source) hit
2a00:ee0:0:115::1 (external source) hit
2a00:ee0:0:115::2 (external source) hit
AS5603

What was measured. From NL host (go6lab) we tested AS5603 (SIOL-NET - Telekom Slovenije, d.d.) using ns3.siol.net (2a00:ee0:d::13). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 25.5/25.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply after PTB (probe 1500B); cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 11 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was taurus-3.siol.net [2a00:ee0:d::13] in AS5603 (SIOL-NET). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS5603 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS5603 details →

SLO host (6connect)open
Target: 2a00:ee0:d::13 · ns3.siol.net · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *-0%*-
32a00:ee1:800:9::188.070%AS5603
SIOL-NET
4taurus-3.siol.net
2a00:ee0:d::13
2.30%AS5603
SIOL-NET
rate-limited: hop 3
4/4 1.4ms4/4 1.7ms4 ✓1500(none)
cur2a00:ee0:d::13 ns3.siol.net
NS2a00:ee0:d::11 taurus-1.siol.net
NS2a00:ee0:e::11 taurus-2.siol.net
drv2a00:ee0:d::23 ns4.siol.net
atl2a00:ee2:4b03:c2ff:a62b:b0ff:fef1:7ca2
… +5 more
2a00:ee0:d::13 ns3.siol.net cur
2a00:ee0:d::11 taurus-1.siol.net NS
2a00:ee0:e::11 taurus-2.siol.net NS
2a00:ee0:d::23 ns4.siol.net drv
2a00:ee2:4b03:c2ff:a62b:b0ff:fef1:7ca2 (external source) atl
2a00:ee2:4b0d:3020:1:76ff:fec9:2eb5 (external source) atl
2a00:ee0:0:114::1 (external source) hit
2a00:ee0:0:114::2 (external source) hit
2a00:ee0:0:115::1 (external source) hit
2a00:ee0:0:115::2 (external source) hit
AS5603

What was measured. From SLO host (6connect) we tested AS5603 (SIOL-NET - Telekom Slovenije, d.d.) using ns3.siol.net (2a00:ee0:d::13). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.4/1.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply after PTB (probe 1500B); cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 4 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was taurus-3.siol.net [2a00:ee0:d::13] in AS5603 (SIOL-NET). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (70%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS5603 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS5603 details →

AS9119SoftnetRFC 4890 ✓RPKI ✓ 9/9ASPA -NL host (go6lab)open
Target: 2a02:800:73:2::58 · trixie.softnet.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.10%*AS203993
STEFFANN-DC-AS
3ccr2-ccr1.dc1.nogalliance.org
2a00:8642:dc1:2::b
1.10%AS203993
STEFFANN-DC-AS
42001:7f8:1::a500:9119:19.820%-
52a02:800:e:200d::123.920%AS9119
SOFTNET-AS
62a02:800:1:3021::19425.10%AS9119
SOFTNET-AS
7trixie.softnet.si
2a02:800:73:2::58
24.70%AS9119
SOFTNET-AS
rate-limited: hop 4, hop 5
4/4 24.8ms4/4 25.3ms7 ✓1500(none)
NS2a02:800:73:2::58 trixie.softnet.si
MX2a02:800:0:3::81 mx1.softnet.eu
MX2a02:800:73:2::60 mx2.softnet.eu
drv2a02:800:73:2::55 mx.softnet.eu
drv2a02:800:73:2::56 support.softnet.si
… +5 more
2a02:800:73:2::58 trixie.softnet.si NS
2a02:800:0:3::81 mx1.softnet.eu MX
2a02:800:73:2::60 mx2.softnet.eu MX
2a02:800:73:2::55 mx.softnet.eu drv
2a02:800:73:2::56 support.softnet.si drv
2a02:800:0:3::1 (external source) hit
2a02:800:0:3::69 (external source) hit
2a02:800:0:3::73 (external source) hit
2a02:800:0:3::80 (external source) hit
2a02:800:0:3::84 (external source) hit
AS9119

What was measured. From NL host (go6lab) we tested AS9119 (SOFTNET-AS - SOFTNET d.o.o.) using trixie.softnet.si (2a02:800:73:2::58). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 24.8/25.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was trixie.softnet.si [2a02:800:73:2::58] in AS9119 (SOFTNET-AS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 4 (20%, ASNone, NA), hop 5 (20%, AS9119, SOFTNET-AS) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS9119 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS9119 details →

SLO host (6connect)open
Target: 2a02:800:73:2::58 · trixie.softnet.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.60%*AS8038
6CONNECT
2ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
78.7-AS8038
6CONNECT
32a03:a100:0:201:1::13.480%AS56635
XENYA
42001:7f8:46:0:1::91193.40%AS51988
ARNES-SIX
52a02:800:1:3021::1945.40%AS9119
SOFTNET-AS
6trixie.softnet.si
2a02:800:73:2::58
5.20%AS9119
SOFTNET-AS
rate-limited: hop 3
4/4 2.6ms4/4 3.1ms6 ✓1500(none)
NS2a02:800:73:2::58 trixie.softnet.si
MX2a02:800:0:3::81 mx1.softnet.eu
MX2a02:800:73:2::60 mx2.softnet.eu
drv2a02:800:73:2::55 mx.softnet.eu
drv2a02:800:73:2::56 support.softnet.si
… +5 more
2a02:800:73:2::58 trixie.softnet.si NS
2a02:800:0:3::81 mx1.softnet.eu MX
2a02:800:73:2::60 mx2.softnet.eu MX
2a02:800:73:2::55 mx.softnet.eu drv
2a02:800:73:2::56 support.softnet.si drv
2a02:800:0:3::1 (external source) hit
2a02:800:0:3::69 (external source) hit
2a02:800:0:3::73 (external source) hit
2a02:800:0:3::80 (external source) hit
2a02:800:0:3::84 (external source) hit
AS9119

What was measured. From SLO host (6connect) we tested AS9119 (SOFTNET-AS - SOFTNET d.o.o.) using trixie.softnet.si (2a02:800:73:2::58). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.6/3.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was trixie.softnet.si [2a02:800:73:2::58] in AS9119 (SOFTNET-AS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (80%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS9119 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS9119 details →

AS12778Mega MPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2a02:d68:2:10::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.80%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.90%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.40%AS50673
Serverius-as
42a03:3f40::10:412.50%AS50673
Serverius-as
5* * *-20%-
6* * *---
7be2950.ccr42.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:482a
11.30%AS174
COGENT-174
8* * *-80%-
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
23.50%AS174
COGENT-174
10be4079.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::8275:3242
23.90%AS174
COGENT-174
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
29.40%AS174
COGENT-174
12be9462.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:11a5
31.70%AS174
COGENT-174
13* * *-0%-
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 5, hop 8
4/4 27.1ms4/4 29.0ms121500(none)
hit2a02:d68:2:10::1
hit2a02:d68:2:10::2
hit2a02:d68:2:12::1
hit2a02:d68:2:4::12
hit2a02:d68:2:4::13
… +4 more
2a02:d68:2:10::1 (external source) hit
2a02:d68:2:10::2 (external source) hit
2a02:d68:2:12::1 (external source) hit
2a02:d68:2:4::12 (external source) hit
2a02:d68:2:4::13 (external source) hit
2a02:d68:2:5::1 (external source) hit
2a02:d68:2:7::1 (external source) hit
2a02:d68:2:9::1 (in-prefix path hop) rtr
2a02:d68::1 (probe) prb
AS12778

What was measured. From NL host (go6lab) we tested AS12778 (SGN - MEGA M, d.o.o.) using (external source) (2a02:d68:2:10::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 27.1/29.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was be9462.nr61.b021176-0.lju01.atlas.cogentco.com [2001:550:0:1000::9a19:11a5] in AS174 (COGENT-174). The path never entered the destination network (AS12778 SGN). Responses kept coming through and including AS174 COGENT-174; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS174 COGENT-174), not at it - AS174 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (20%, AS174, COGENT-174), hop 8 (80%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS12778 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS12778 details →

SLO host (6connect)open
Target: 2a02:d68:2:10::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *-0%*-
32a03:a100:0:201:1::12.2-AS56635
XENYA
4* * *-0%-
5* * *---
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 14.1ms4/4 3.6ms31500(none)
hit2a02:d68:2:10::1
hit2a02:d68:2:10::2
hit2a02:d68:2:12::1
hit2a02:d68:2:4::12
hit2a02:d68:2:4::13
… +4 more
2a02:d68:2:10::1 (external source) hit
2a02:d68:2:10::2 (external source) hit
2a02:d68:2:12::1 (external source) hit
2a02:d68:2:4::12 (external source) hit
2a02:d68:2:4::13 (external source) hit
2a02:d68:2:5::1 (external source) hit
2a02:d68:2:7::1 (external source) hit
2a02:d68:2:9::1 (in-prefix path hop) rtr
2a02:d68::1 (probe) prb
AS12778

What was measured. From SLO host (6connect) we tested AS12778 (SGN - MEGA M, d.o.o.) using (external source) (2a02:d68:2:10::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 14.1/3.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 3 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a03:a100:0:201:1::1 in AS56635 (XENYA). The path never entered the destination network (AS12778 SGN). Responses kept coming through and including AS56635 XENYA; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS56635 XENYA), not at it - AS56635 did reply.

Likely problem: none. AS12778 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS12778 details →

AS21283A1 SlovenijaPARFC 4890 ✓RPKI ✓ 3/3ASPA -NL host (go6lab)open
Target: 2001:15c0:1000:1001::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.410%AS50673
Serverius-as
42a03:3f40::10:412.80%AS50673
Serverius-as
5* * *-0%-
6* * *-0%-
7* * *-0%-
82001:850:501:bc::223.40%AS8447
A1TELEKOM-AT
92001:15c0:1000:1001::126.00%AS21283
A1SI-AS
10* * *-0%-
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 26.3ms4/4 26.1ms91500(none)
hit2001:15c0:1000:1001::2
hit2001:15c0:1000:1002::
hit2001:15c0:1000:1002::1
hit2001:15c0:1000:1002::2
hit2001:15c0:1000:1051::99
… +5 more
2001:15c0:1000:1001::2 (external source) hit
2001:15c0:1000:1002:: (external source) hit
2001:15c0:1000:1002::1 (external source) hit
2001:15c0:1000:1002::2 (external source) hit
2001:15c0:1000:1051::99 (external source) hit
2001:15c0:1000:300::3 (external source) hit
2001:15c0:1001:1e:2e91:abff:fe9f:c88f (external source) hit
2001:15c0:2101:24::2 (in-prefix path hop) rtr
2001:15c0:2110:2830:eade:27ff:fec9:6ab2 (in-prefix path hop) rtr
2a00:1a20:46:4::3 (in-prefix path hop) rtr
AS21283

What was measured. From NL host (go6lab) we tested AS21283 (A1SI-AS - A1 Slovenija telekomunikacijske storitve,d.d.) using (external source) (2001:15c0:1000:1001::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.3/26.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:15c0:1000:1001::1 in AS21283 (A1SI-AS). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS21283 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS21283 details →

SLO host (6connect)open
Target: 2001:15c0:1000:1001::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *-0%*-
32a03:a100:0:201:1::13.930%AS56635
XENYA
4six.a1.si
2001:7f8:46::2:1283
3.80%AS21283
A1 Slovenija
52001:15c0:1000:1001::14.10%AS21283
A1SI-AS
6* * *-0%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 2.2ms4/4 4.0ms51500(none)
hit2001:15c0:1000:1001::2
hit2001:15c0:1000:1002::
hit2001:15c0:1000:1002::1
hit2001:15c0:1000:1002::2
hit2001:15c0:1000:1051::99
… +5 more
2001:15c0:1000:1001::2 (external source) hit
2001:15c0:1000:1002:: (external source) hit
2001:15c0:1000:1002::1 (external source) hit
2001:15c0:1000:1002::2 (external source) hit
2001:15c0:1000:1051::99 (external source) hit
2001:15c0:1000:300::3 (external source) hit
2001:15c0:1001:1e:2e91:abff:fe9f:c88f (external source) hit
2001:15c0:2101:24::2 (in-prefix path hop) rtr
2001:15c0:2110:2830:eade:27ff:fec9:6ab2 (in-prefix path hop) rtr
2a00:1a20:46:4::3 (in-prefix path hop) rtr
AS21283

What was measured. From SLO host (6connect) we tested AS21283 (A1SI-AS - A1 Slovenija telekomunikacijske storitve,d.d.) using (external source) (2001:15c0:1000:1001::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.2/4.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:15c0:1000:1001::1 in AS21283 (A1SI-AS). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS21283 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS21283 details →

AS24629NILPIRPKI -ASPA -NL host (go6lab)all blocked
Target: 2001:67c:58:d04::13 · www.nil.si · filter: past AS5405 (INTERDOTLINK)
#IP / PTRRTTlossAS
12a00:8642:42::30.90%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.60%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:411.90%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.00%-
6r4-ams1-nl.as5405.net
2a11:4140::10
27.00%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.70%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.50%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.80%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
41.90%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
27.40%AS5405
INTERDOTLINK
122a11:4142:2002::126.30%AS5405
INTERDOTLINK
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
0/4 -0/4 -121500past AS5405 (INTERDOTLINK)
drv2001:67c:58:d04::13 www.nil.si
AS24629

What was measured. From NL host (go6lab) we tested AS24629 (NIL-AS - NIL Data Communications Ltd.) using www.nil.si (2001:67c:58:d04::13). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. No Echo Reply was received for either size (small 0/4, 1500 B 0/4). ICMPv6 Echo to this address is fully suppressed.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. We have no Echo Reply for either size and tracepath never observed a Path-MTU drop, so this run cannot say anything definitive about ICMPv6 Type 2 / PMTUD handling toward this destination. Echo being blocked does not by itself mean PMTUD is broken - RFC 4890 recommends operators drop Echo Request inbound (or rate-limit it) while keeping Type 2 permitted, and a network that did exactly that would look identical from this kind of probe. To know for certain we would need an active TCP flow into the destination plus a forged-PTB injection test, which is outside the current measurement battery. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a11:4142:2002::1 in AS5405 (INTERDOTLINK). The path never entered the destination network (AS24629 NIL-AS). Responses kept coming through and including AS5405 INTERDOTLINK; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5405 INTERDOTLINK), not at it - AS5405 did reply.

Likely problem: the probed address is silent on every protocol - this could be a cold address (no service) or a network that drops everything inbound. Whether ICMPv6 specifically is blocked cannot be isolated from this host alone. Filter is most likely at past AS5405 (INTERDOTLINK).

For more information click the ASN number on the far left or follow this direct link: AS24629 details →

SLO host (6connect)open
Target: 2001:67c:58:d04::13 · www.nil.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *-0%*-
32a00:ee1:800:9::179.390%AS5603
SIOL-NET
42a00:ee1:c00::210.00%AS5603
SIOL-NET
5* * *-0%-
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 4.1ms4/4 4.2ms41500(none)
drv2001:67c:58:d04::13 www.nil.si
AS24629

What was measured. From SLO host (6connect) we tested AS24629 (NIL-AS - NIL Data Communications Ltd.) using www.nil.si (2001:67c:58:d04::13). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 4.1/4.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 4 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee1:c00::2 in AS5603 (SIOL-NET). The path never entered the destination network (AS24629 NIL-AS). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS24629 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS24629 details →

AS25173ISKRAPIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:2004:1::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.00%AS50673
Serverius-as
42a03:3f40::10:412.60%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.00%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.50%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.50%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.00%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.10%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
26.10%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
26.30%AS5405
INTERDOTLINK
122a11:4142:2002::126.70%AS5405
INTERDOTLINK
132a00:ee0:5:7::226.70%AS5603
SIOL-NET
142a00:ee0:5:7::226.80%AS5603
SIOL-NET
15* * *-0%-
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 26.5ms4/4 27.0ms141500(none)
hit2001:67c:2004:1::2
AS25173

What was measured. From NL host (go6lab) we tested AS25173 (ISKRATR-AS - ISKRA, d.o.o.) using (external source) (2001:67c:2004:1::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.5/27.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 14 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee0:5:7::2 in AS5603 (SIOL-NET). The path never entered the destination network (AS25173 ISKRATR-AS). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Likely problem: none. AS25173 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25173 details →

SLO host (6connect)open
Target: 2001:67c:2004:1::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::169.890%AS5603
SIOL-NET
42a01-260-4117--1e.link6.t-2.net
2a01:260:4117::1e
2.20%AS34779
T-2-AS
52a01-260-4117--1e.link6.t-2.net
2a01:260:4117::1e
4.10%AS34779
T-2-AS
6* * *-0%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 1.5ms4/4 3.8ms51500(none)
hit2001:67c:2004:1::2
AS25173

What was measured. From SLO host (6connect) we tested AS25173 (ISKRATR-AS - ISKRA, d.o.o.) using (external source) (2001:67c:2004:1::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.5/3.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-4117--1e.link6.t-2.net [2a01:260:4117::1e] in AS34779 (T-2-AS). The path never entered the destination network (AS25173 ISKRATR-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS25173 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25173 details →

AS25303KDDPIRFC 4890 ✗RPKI -ASPA -NL host (go6lab)open
Target: 2001:67c:20b8:1::10 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.90%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.810%AS50673
Serverius-as
42a03:3f40::10:335.50%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
34.70%-
62a01-260-1-1--9d.core6.t-2.net
2a01:260:1:1::9d
34.80%AS34779
T-2-AS
72a01-260-4107--2.link6.t-2.net
2a01:260:4107::2
36.00%AS34779
T-2-AS
8* * *-0%-
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 43.1ms4/4 43.4ms71500(none)
hit2001:67c:20b8:1::10
hit2001:67c:20b8:1::9
hit2001:67c:20b8:ffff::2
hit2001:67c:20b8:ffff::5
hit2001:67c:20b8:ffff::6
… +1 more
2001:67c:20b8:1::10 (external source) hit
2001:67c:20b8:1::9 (external source) hit
2001:67c:20b8:ffff::2 (external source) hit
2001:67c:20b8:ffff::5 (external source) hit
2001:67c:20b8:ffff::6 (external source) hit
2001:67c:20b9:ffff::2 (external source) hit
AS25303

What was measured. From NL host (go6lab) we tested AS25303 (KDD - KDD d.d.) using (external source) (2001:67c:20b8:1::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 43.1/43.4 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-4107--2.link6.t-2.net [2a01:260:4107::2] in AS34779 (T-2-AS). The path never entered the destination network (AS25303 KDD). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS25303 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25303 details →

SLO host (6connect)open
Target: 2001:67c:20b8:1::10 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.10%*AS8038
6CONNECT
2* * *---
3* * *---
4six.t-2.si
2001:7f8:46::3:4779
0.90%AS34779
T-2
52a01-260-1-1--9b.core6.t-2.net
2a01:260:1:1::9b
2.50%AS34779
T-2-AS
62a01-260-4107--2.link6.t-2.net
2a01:260:4107::2
1.90%AS34779
T-2-AS
7* * *-0%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 3.5ms4/4 4.2ms61500(none)
hit2001:67c:20b8:1::10
hit2001:67c:20b8:1::9
hit2001:67c:20b8:ffff::2
hit2001:67c:20b8:ffff::5
hit2001:67c:20b8:ffff::6
… +1 more
2001:67c:20b8:1::10 (external source) hit
2001:67c:20b8:1::9 (external source) hit
2001:67c:20b8:ffff::2 (external source) hit
2001:67c:20b8:ffff::5 (external source) hit
2001:67c:20b8:ffff::6 (external source) hit
2001:67c:20b9:ffff::2 (external source) hit
AS25303

What was measured. From SLO host (6connect) we tested AS25303 (KDD - KDD d.d.) using (external source) (2001:67c:20b8:1::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.5/4.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-4107--2.link6.t-2.net [2a01:260:4107::2] in AS34779 (T-2-AS). The path never entered the destination network (AS25303 KDD). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Likely problem: none. AS25303 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25303 details →

AS25467AktonPARFC 4890 ✓RPKI ⚠ 8/17ASPA -NL host (go6lab)open
Target: 2a02:2230:101::53 · www.akton.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1943.410%AS50673
Serverius-as
42a03:3f40::10:3311.40%AS50673
Serverius-as
52a02:2d8:1:a001:232a4.10%-
6RT.IRX.VIE.AT.retn.net
2a02:2d8::57f5:e0af
20.210%AS9002
RETN-AS
72001:7f8:30:0:2:1:2:546727.20%-
8* * *---
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3, hop 6
4/4 27.0ms4/4 27.6ms71500(none)
cur2a02:2230:101::53 www.akton.si
hit2a02:2230:201:1::1
hit2a02:2230:227::2
hit2a02:2230:300::1
hit2a02:2230:3300::1
… +4 more
2a02:2230:101::53 www.akton.si cur
2a02:2230:201:1::1 (external source) hit
2a02:2230:227::2 (external source) hit
2a02:2230:300::1 (external source) hit
2a02:2230:3300::1 (external source) hit
2a03:f80:389:46:183:185:10:1 (external source) hit
2a03:f80:389:46:183:185:27:1 (external source) hit
2a03:f80:389:4d02::1 (external source) hit
2a03:f80:389:7c8f::1 (external source) hit
AS25467

What was measured. From NL host (go6lab) we tested AS25467 (AKTON-AS - Akton d.o.o.) using www.akton.si (2a02:2230:101::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 27.0/27.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:7f8:30:0:2:1:2:5467. The path never entered the destination network (AS25467 AKTON-AS). Responses kept coming through and including AS?; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past, not at it - ASNone did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as), hop 6 (10%, AS9002, RETN-AS) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS25467 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25467 details →

SLO host (6connect)open
Target: 2a02:2230:101::53 · www.akton.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-30%-
42a00:fc0:4314:b::a1.90%AS3212
TELEMACH
52001:7f8:30:0:2:1:0:32129.80%-
62001:7f8:30:0:2:1:2:546715.00%-
7* * *---
8* * *-0%-
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 15.5ms4/4 15.9ms61500(none)
cur2a02:2230:101::53 www.akton.si
hit2a02:2230:201:1::1
hit2a02:2230:227::2
hit2a02:2230:300::1
hit2a02:2230:3300::1
… +4 more
2a02:2230:101::53 www.akton.si cur
2a02:2230:201:1::1 (external source) hit
2a02:2230:227::2 (external source) hit
2a02:2230:300::1 (external source) hit
2a02:2230:3300::1 (external source) hit
2a03:f80:389:46:183:185:10:1 (external source) hit
2a03:f80:389:46:183:185:27:1 (external source) hit
2a03:f80:389:4d02::1 (external source) hit
2a03:f80:389:7c8f::1 (external source) hit
AS25467

What was measured. From SLO host (6connect) we tested AS25467 (AKTON-AS - Akton d.o.o.) using www.akton.si (2a02:2230:101::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 15.5/15.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:7f8:30:0:2:1:2:5467. The path never entered the destination network (AS25467 AKTON-AS). Responses kept coming through and including AS?; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past, not at it - ASNone did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS25467 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS25467 details →

AS28682Pošta SlovenijePI/PARPKI ✓ 1/1ASPA -NL host (go6lab)icmp blocked
Target: 2a01:9ce0:0:1:7ec2:55ff:fe25:2c00 · via IPv6 Hitlist (responsive) · filter: past AS3212 (TELEMACH)
#IP / PTRRTTlossAS
12a00:8642:42::31.20%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.420%AS50673
Serverius-as
42a03:3f40::10:334.40%AS50673
Serverius-as
52001:7f8:13::a500:3212:131.10%-
62a00:fc0:4320:c::a29.70%AS3212
TELEMACH
72a00:fc0:4320:c::b27.490%AS3212
TELEMACH
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3, hop 7
0/4 -0/4 -71500past AS3212 (TELEMACH)
hit2a01:9ce0:0:1:7ec2:55ff:fe25:2c00
hit2a01:9ce0:0:1:7ec2:55ff:fe4e:b2e8
hit2a01:9ce0:0:1:8077:4bff:fec4:cf6e
hit2a01:9ce0:0:1::1
hit2a01:9ce0:0:1::2
… +3 more
2a01:9ce0:0:1:7ec2:55ff:fe25:2c00 (external source) hit
2a01:9ce0:0:1:7ec2:55ff:fe4e:b2e8 (external source) hit
2a01:9ce0:0:1:8077:4bff:fec4:cf6e (external source) hit
2a01:9ce0:0:1::1 (external source) hit
2a01:9ce0:0:1::2 (external source) hit
2a01:9ce0:0:1::3 (external source) hit
2a01:9ce0:0:1::4 (external source) hit
2a01:9ce0:0:1::5 (external source) hit
AS28682

What was measured. From NL host (go6lab) we tested AS28682 (ASN-POSTA - Posta Slovenije d.o.o.) using (external source) (2a01:9ce0:0:1:7ec2:55ff:fe25:2c00). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. No Echo Reply was received for either size (small 0/4, 1500 B 0/4). ICMPv6 Echo to this address is fully suppressed.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. We have no Echo Reply for either size and tracepath never observed a Path-MTU drop, so this run cannot say anything definitive about ICMPv6 Type 2 / PMTUD handling toward this destination. Echo being blocked does not by itself mean PMTUD is broken - RFC 4890 recommends operators drop Echo Request inbound (or rate-limit it) while keeping Type 2 permitted, and a network that did exactly that would look identical from this kind of probe. To know for certain we would need an active TCP flow into the destination plus a forged-PTB injection test, which is outside the current measurement battery. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:fc0:4320:c::b in AS3212 (TELEMACH). The path never entered the destination network (AS28682 ASN-POSTA). Responses kept coming through and including AS3212 TELEMACH; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS3212 TELEMACH), not at it - AS3212 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS50673, Serverius-as), hop 7 (90%, AS3212, TELEMACH) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: ICMPv6 to this host is fully blocked, but the host answers TCP - the host firewall denies incoming Echo. PMTUD and traceroute diagnostics toward it will fail. Filter is most likely at past AS3212 (TELEMACH).

For more information click the ASN number on the far left or follow this direct link: AS28682 details →

SLO host (6connect)icmp blocked
Target: 2a01:9ce0:0:1:7ec2:55ff:fe25:2c00 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-70%-
42001:7f8:46:0:1:0:2:86823.00%AS51988
ARNES-SIX
5* * *-0%-
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 2.0ms4/4 1.8ms41500(none)
hit2a01:9ce0:0:1:7ec2:55ff:fe25:2c00
hit2a01:9ce0:0:1:7ec2:55ff:fe4e:b2e8
hit2a01:9ce0:0:1:8077:4bff:fec4:cf6e
hit2a01:9ce0:0:1::1
hit2a01:9ce0:0:1::2
… +3 more
2a01:9ce0:0:1:7ec2:55ff:fe25:2c00 (external source) hit
2a01:9ce0:0:1:7ec2:55ff:fe4e:b2e8 (external source) hit
2a01:9ce0:0:1:8077:4bff:fec4:cf6e (external source) hit
2a01:9ce0:0:1::1 (external source) hit
2a01:9ce0:0:1::2 (external source) hit
2a01:9ce0:0:1::3 (external source) hit
2a01:9ce0:0:1::4 (external source) hit
2a01:9ce0:0:1::5 (external source) hit
AS28682

What was measured. From SLO host (6connect) we tested AS28682 (ASN-POSTA - Posta Slovenije d.o.o.) using (external source) (2a01:9ce0:0:1:7ec2:55ff:fe25:2c00). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.0/1.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:7f8:46:0:1:0:2:8682 in AS51988 (ARNES-SIX). The path never entered the destination network (AS28682 ASN-POSTA). Responses kept coming through and including AS51988 ARNES-SIX; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS51988 ARNES-SIX), not at it - AS51988 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (70%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/80 and refused (RST) on tcp/443 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS28682 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS28682 details →

AS28933FE / LTFEPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a00:1368:1000:1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.30%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.30%AS50673
Serverius-as
42a03:3f40::10:412.50%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
3.70%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.20%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.80%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
27.00%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.20%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
26.80%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
26.20%AS5405
INTERDOTLINK
122a11:4142:2002::126.40%AS5405
INTERDOTLINK
132a00:ee0:5::227.10%AS5603
SIOL-NET
142a00:ee0:5::227.20%AS5603
SIOL-NET
152001:1470:fffe:10::327.10%AS2107
ARNES-NET
16* * *-0%-
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 26.6ms4/4 27.6ms151500(none)
hit2a00:1368:1000:1::1
hit2a00:1368:1000:30::1
hit2a00:1368:1000:70::1
AS28933

What was measured. From NL host (go6lab) we tested AS28933 (LTFE-AS - University of Ljubljana, Faculty of Electrical Engineering) using (external source) (2a00:1368:1000:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.6/27.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 15 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:1470:fffe:10::3 in AS2107 (ARNES-NET). The path never entered the destination network (AS28933 LTFE-AS). Responses kept coming through and including AS2107 ARNES-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS2107 ARNES-NET), not at it - AS2107 did reply.

Likely problem: none. AS28933 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS28933 details →

SLO host (6connect)open
Target: 2a00:1368:1000:1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::166.590%AS5603
SIOL-NET
42a00:ee0:5::24.70%AS5603
SIOL-NET
52001:1470:fffe:10::34.50%AS2107
ARNES-NET
6* * *-0%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 1.2ms4/4 2.1ms51500(none)
hit2a00:1368:1000:1::1
hit2a00:1368:1000:30::1
hit2a00:1368:1000:70::1
AS28933

What was measured. From SLO host (6connect) we tested AS28933 (LTFE-AS - University of Ljubljana, Faculty of Electrical Engineering) using (external source) (2a00:1368:1000:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.2/2.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:1470:fffe:10::3 in AS2107 (ARNES-NET). The path never entered the destination network (AS28933 LTFE-AS). Responses kept coming through and including AS2107 ARNES-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS2107 ARNES-NET), not at it - AS2107 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS28933 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS28933 details →

AS34779T-2PARFC 4890 ✓RPKI ✓ 8/8ASPA -NL host (go6lab)open
Target: 2a01:260:1:2::72 · www.t-2.net · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.20%AS203993
STEFFANN-DC-AS
2* * *-0%*-
3* * *---
4* * *---
5be6.core2.ams2.he.net
2001:470:0:61c::2
5.10%AS6939
HURRICANE
6t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
32.10%-
72a01:260:1:1::27435.90%AS34779
T-2-AS
82a01:260:1:2::7239.80%AS34779
T-2-AS
4/4 37.9ms4/4 38.6ms8 ✓1500(none)
cur2a01:260:1:2::72 www.t-2.net
NS2a01:260:1:2::4 dns1.t-2.si
NS2a01:260:1:3::4 dns2.t-2.si
MX2a01:260:1:4::24 mx1.t-2.si
MX2a01:260:1:4::28 mx2.t-2.si
… +5 more
2a01:260:1:2::72 www.t-2.net cur
2a01:260:1:2::4 dns1.t-2.si NS
2a01:260:1:3::4 dns2.t-2.si NS
2a01:260:1:4::24 mx1.t-2.si MX
2a01:260:1:4::28 mx2.t-2.si MX
2a01:260:1:4::27 smtp-bad-in-1.t-2.net MX
2a01:260:1:4::23 smtp-good-in-1.t-2.net MX
2a01:260:1:4::3a imap.t-2.com whois
2a01:260:1:4::3b imap.t-2.com whois
2a01:260:1:4::21 smtp.t-2.com whois
AS34779

What was measured. From NL host (go6lab) we tested AS34779 (T-2-AS - T-2, d.o.o.) using www.t-2.net (2a01:260:1:2::72). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 37.9/38.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a01:260:1:2::72 in AS34779 (T-2-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS34779 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS34779 details →

SLO host (6connect)open
Target: 2a01:260:1:2::72 · www.t-2.net · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.90%*AS8038
6CONNECT
2* * *---
3* * *---
4six.t-2.si
2001:7f8:46::3:4779
1.30%AS34779
T-2
52a01:260:1:1::2741.40%AS34779
T-2-AS
62a01:260:1:2::723.70%AS34779
T-2-AS
4/4 1.6ms4/4 4.0ms6 ✓1500(none)
cur2a01:260:1:2::72 www.t-2.net
NS2a01:260:1:2::4 dns1.t-2.si
NS2a01:260:1:3::4 dns2.t-2.si
MX2a01:260:1:4::24 mx1.t-2.si
MX2a01:260:1:4::28 mx2.t-2.si
… +5 more
2a01:260:1:2::72 www.t-2.net cur
2a01:260:1:2::4 dns1.t-2.si NS
2a01:260:1:3::4 dns2.t-2.si NS
2a01:260:1:4::24 mx1.t-2.si MX
2a01:260:1:4::28 mx2.t-2.si MX
2a01:260:1:4::27 smtp-bad-in-1.t-2.net MX
2a01:260:1:4::23 smtp-good-in-1.t-2.net MX
2a01:260:1:4::3a imap.t-2.com whois
2a01:260:1:4::3b imap.t-2.com whois
2a01:260:1:4::21 smtp.t-2.com whois
AS34779

What was measured. From SLO host (6connect) we tested AS34779 (T-2-AS - T-2, d.o.o.) using www.t-2.net (2a01:260:1:2::72). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.6/4.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a01:260:1:2::72 in AS34779 (T-2-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS34779 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS34779 details →

AS39387DeloPIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:300::30 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.00%AS50673
Serverius-as
42a03:3f40::10:412.20%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.10%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.30%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.70%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.40%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.10%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
26.30%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
27.00%AS5405
INTERDOTLINK
122a11:4142:2002::126.80%AS5405
INTERDOTLINK
132a00:ee0:140:2::530.20%AS5603
SIOL-NET
142a00:ee0:140:2::529.10%AS5603
SIOL-NET
15* * *-0%-
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 30.1ms4/4 30.3ms141500(none)
hit2001:67c:300::30
AS39387

What was measured. From NL host (go6lab) we tested AS39387 (DELO-AS - DELO Casopisno Zaloznisko Podjetje d.o.o.) using (external source) (2001:67c:300::30). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 30.1/30.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 14 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee0:140:2::5 in AS5603 (SIOL-NET). The path never entered the destination network (AS39387 DELO-AS). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Likely problem: none. AS39387 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS39387 details →

SLO host (6connect)open
Target: 2001:67c:300::30 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::141.090%AS5603
SIOL-NET
42a00:ee0:140:2::50.90%AS5603
SIOL-NET
5* * *-0%-
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 0.8ms4/4 2.6ms41500(none)
hit2001:67c:300::30
AS39387

What was measured. From SLO host (6connect) we tested AS39387 (DELO-AS - DELO Casopisno Zaloznisko Podjetje d.o.o.) using (external source) (2001:67c:300::30). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 0.8/2.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee0:140:2::5 in AS5603 (SIOL-NET). The path never entered the destination network (AS39387 DELO-AS). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS39387 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS39387 details →

AS41427DatacenterPIRFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2001:678:cc8:2:8000:: · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.50%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:411.90%AS50673
Serverius-as
52001:978:2:40::3:13.570%AS174
COGENT-174
6* * *-60%-
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
12.50%AS174
COGENT-174
8* * *-40%-
9be5456.ccr81.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:48a6
23.120%AS174
COGENT-174
10be3935.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:274e
23.20%AS174
COGENT-174
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
30.20%AS174
COGENT-174
12be9462.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:11a5
31.40%AS174
COGENT-174
132001:978:2:39::6:229.50%AS174
COGENT-174
142001:678:cc8:ffff::529.80%AS41427
marc-net_AS
152001:678:cc8:2:800031.10%-
rate-limited: hop 5, hop 6, hop 8, hop 9
4/4 29.2ms4/4 29.4ms151500(none)
hit2001:678:cc8:2:8000::
hit2001:678:cc8:2:8000:c001:aaaa:aaaa
hit2001:678:cc8:2:8000:c001:c0ff:ee
hit2001:678:cc8:3::1
hit2001:678:cc8:3::2
… +3 more
2001:678:cc8:2:8000:: (external source) hit
2001:678:cc8:2:8000:c001:aaaa:aaaa (external source) hit
2001:678:cc8:2:8000:c001:c0ff:ee (external source) hit
2001:678:cc8:3::1 (external source) hit
2001:678:cc8:3::2 (external source) hit
2001:678:cc8:ffff::5 (external source) hit
2001:678:cc8:ffff::6 (external source) hit
2001:678:cc8::1 (probe) prb
AS41427

What was measured. From NL host (go6lab) we tested AS41427 (MARC-NET_AS - Datacenter d.o.o.) using (external source) (2001:678:cc8:2:8000::). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.2/29.4 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 15 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:678:cc8:2:8000. The path never entered the destination network (AS41427 marc-net_AS). Responses kept coming through and including AS?; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past, not at it - ASNone did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (70%, AS174, COGENT-174), hop 6 (60%, AS174, COGENT-174), hop 8 (40%, AS174, COGENT-174), hop 9 (20%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS41427 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS41427 details →

SLO host (6connect)open
Target: 2001:678:cc8:2:8000:: · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-70%-
4six2.metronet.si
2001:7f8:46:0:1:0:4:1427
4.40%AS51988
ARNES-SIX
52001:678:cc8:ffff::511.40%AS41427
marc-net_AS
62001:678:cc8:2:80001.50%-
rate-limited: hop 3
4/4 1.5ms4/4 1.7ms61500(none)
hit2001:678:cc8:2:8000::
hit2001:678:cc8:2:8000:c001:aaaa:aaaa
hit2001:678:cc8:2:8000:c001:c0ff:ee
hit2001:678:cc8:3::1
hit2001:678:cc8:3::2
… +3 more
2001:678:cc8:2:8000:: (external source) hit
2001:678:cc8:2:8000:c001:aaaa:aaaa (external source) hit
2001:678:cc8:2:8000:c001:c0ff:ee (external source) hit
2001:678:cc8:3::1 (external source) hit
2001:678:cc8:3::2 (external source) hit
2001:678:cc8:ffff::5 (external source) hit
2001:678:cc8:ffff::6 (external source) hit
2001:678:cc8::1 (probe) prb
AS41427

What was measured. From SLO host (6connect) we tested AS41427 (MARC-NET_AS - Datacenter d.o.o.) using (external source) (2001:678:cc8:2:8000::). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.5/1.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:678:cc8:2:8000. The path never entered the destination network (AS41427 marc-net_AS). Responses kept coming through and including AS?; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past, not at it - ASNone did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (70%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS41427 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS41427 details →

AS41828Telemach SlovenijaPI/PARFC 4890 ✓RPKI ⚠ 1/2ASPA ✓NL host (go6lab)open
Target: 2a02:840:101:126::2:1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.60%AS203993
STEFFANN-DC-AS
2* * *---
32a00:1ca8:1::1942.90%AS50673
Serverius-as
42a03:3f40::10:334.30%AS50673
Serverius-as
52001:7f8:13::a500:3212:128.80%-
62a02:840:101:126::2:128.40%AS41828
TELEMACH-HOSTING
4/4 52.3ms4/4 57.6ms6 ✓1500(none)
hit2a02:840:101:126::2:1
hit2a02:840:101:126::2:2
hit2a02:840:1:1000::162
hit2a02:840:1:1000::165
hit2a02:840:1:1000::170
… +4 more
2a02:840:101:126::2:1 (external source) hit
2a02:840:101:126::2:2 (external source) hit
2a02:840:1:1000::162 (external source) hit
2a02:840:1:1000::165 (external source) hit
2a02:840:1:1000::170 (external source) hit
2a02:840:1:1000::2 (external source) hit
2a02:840:1:1000::203 (external source) hit
2a02:840:1:1000::205 (external source) hit
2a02:840::1 (probe) prb
AS41828

What was measured. From NL host (go6lab) we tested AS41828 (TELEMACH-HOSTING - Telemach Slovenija d.o.o.) using (external source) (2a02:840:101:126::2:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 52.3/57.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:840:101:126::2:1 in AS41828 (TELEMACH-HOSTING). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS41828 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS41828 details →

SLO host (6connect)open
Target: 2a02:840:101:126::2:1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.80%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::112.4-AS56635
XENYA
42001:7f8:46::32123.30%AS51988
ARNES-SIX
52a00:fc0:3212:3::a2.70%AS3212
TELEMACH
62a00:fc0:3212:200::a3.10%AS3212
TELEMACH
72a02:840:101:126::2:14.90%AS41828
TELEMACH-HOSTING
4/4 30.0ms4/4 40.8ms7 ✓1500(none)
hit2a02:840:101:126::2:1
hit2a02:840:101:126::2:2
hit2a02:840:1:1000::162
hit2a02:840:1:1000::165
hit2a02:840:1:1000::170
… +4 more
2a02:840:101:126::2:1 (external source) hit
2a02:840:101:126::2:2 (external source) hit
2a02:840:1:1000::162 (external source) hit
2a02:840:1:1000::165 (external source) hit
2a02:840:1:1000::170 (external source) hit
2a02:840:1:1000::2 (external source) hit
2a02:840:1:1000::203 (external source) hit
2a02:840:1:1000::205 (external source) hit
2a02:840::1 (probe) prb
AS41828

What was measured. From SLO host (6connect) we tested AS41828 (TELEMACH-HOSTING - Telemach Slovenija d.o.o.) using (external source) (2a02:840:101:126::2:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 30.0/40.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:840:101:126::2:1 in AS41828 (TELEMACH-HOSTING). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS41828 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS41828 details →

AS42207AKOSPARFC 4890 ✓RPKI ✓ 3/3ASPA -NL host (go6lab)open
Target: 2a0b:15c0:abcd:1::abcd:ac05 · (external source) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2* * *-0%*-
3* * *---
4be1.core3.ams1.he.net
2001:470:e:5e::1
5.70%AS6939
HURRICANE
5be2.core4.fra1.he.net
2001:470:e:38::2
11.10%AS6939
HURRICANE
6be3.core2.fra2.he.net
2001:470:e:5a::1
11.70%AS6939
HURRICANE
7e0-33.core2.muc1.he.net
2001:470:0:2ef::2
14.50%AS6939
HURRICANE
8100ge0-0-0-23.core1.vie1.he.net
2001:470:0:41d::1
23.10%AS6939
HURRICANE
9six.akos.si
2001:7f8:46::4:2207
34.10%AS42207
AKOS
102a0b:15c0:abcd:1::abcd:ac0524.50%AS42207
AKOS
4/4 24.5ms4/4 24.9ms10 ✓1500(none)
atl2a0b:15c0:abcd:1::abcd:ac05
hit2a0b:15c0::2
hit2a0b:15c0:abcd:1:1623:f2ff:fe5c:5cbe
hit2a0b:15c0:abcd:1::1
hit2a0b:15c0:ac05:1::1
… +3 more
2a0b:15c0:abcd:1::abcd:ac05 (external source) atl
2a0b:15c0::2 (external source) hit
2a0b:15c0:abcd:1:1623:f2ff:fe5c:5cbe (external source) hit
2a0b:15c0:abcd:1::1 (external source) hit
2a0b:15c0:ac05:1::1 (external source) hit
2a0b:15c0:ac05:1:f6e9:d4ff:fe6a:70be (external source) hit
2a0b:15c0:dada:1::1 (external source) hit
2a0b:15c0::1 (probe) prb
AS42207

What was measured. From NL host (go6lab) we tested AS42207 (AKOS - Agencija za komunikacijska omrezja in storitve republike Slovenije) using (external source) (2a0b:15c0:abcd:1::abcd:ac05). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 24.5/24.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 10 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0b:15c0:abcd:1::abcd:ac05 in AS42207 (AKOS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS42207 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS42207 details →

SLO host (6connect)open
Target: 2a0b:15c0:abcd:1::abcd:ac05 · (external source) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *-0%*-
32a03:a100:0:201:1::153.320%AS56635
XENYA
4six.akos.si
2001:7f8:46::4:2207
3.00%AS42207
AKOS
52a0b:15c0:abcd:1::abcd:ac051.00%AS42207
AKOS
rate-limited: hop 3
4/4 1.8ms4/4 1.9ms5 ✓1500(none)
atl2a0b:15c0:abcd:1::abcd:ac05
hit2a0b:15c0::2
hit2a0b:15c0:abcd:1:1623:f2ff:fe5c:5cbe
hit2a0b:15c0:abcd:1::1
hit2a0b:15c0:ac05:1::1
… +3 more
2a0b:15c0:abcd:1::abcd:ac05 (external source) atl
2a0b:15c0::2 (external source) hit
2a0b:15c0:abcd:1:1623:f2ff:fe5c:5cbe (external source) hit
2a0b:15c0:abcd:1::1 (external source) hit
2a0b:15c0:ac05:1::1 (external source) hit
2a0b:15c0:ac05:1:f6e9:d4ff:fe6a:70be (external source) hit
2a0b:15c0:dada:1::1 (external source) hit
2a0b:15c0::1 (probe) prb
AS42207

What was measured. From SLO host (6connect) we tested AS42207 (AKOS - Agencija za komunikacijska omrezja in storitve republike Slovenije) using (external source) (2a0b:15c0:abcd:1::abcd:ac05). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.8/1.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0b:15c0:abcd:1::abcd:ac05 in AS42207 (AKOS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS42207 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS42207 details →

AS42700Realis Informacijske tehnologijePIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:678:1ec::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.60%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.20%AS50673
Serverius-as
42a03:3f40::10:334.80%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
33.70%-
62a01-260-1-1--95.core6.t-2.net
2a01:260:1:1::95
38.30%AS34779
T-2-AS
72a01-260-4042--2.link6.t-2.net
2a01:260:4042::2
38.60%AS34779
T-2-AS
4/4 55.9ms4/4 48.1ms71500(none)
prb2001:678:1ec::1
AS42700

What was measured. From NL host (go6lab) we tested AS42700 (REALIS-AS - Realis Informacijske tehnologije d.o.o.) using (probe) (2001:678:1ec::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 55.9/48.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-4042--2.link6.t-2.net [2a01:260:4042::2] in AS34779 (T-2-AS). The path never entered the destination network (AS42700 REALIS-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS42700 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS42700 details →

SLO host (6connect)open
Target: 2001:678:1ec::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.10%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::130.9-AS56635
XENYA
4six.t-2.si
2001:7f8:46::3:4779
1.20%AS34779
T-2
52a01-260-1-1--93.core6.t-2.net
2a01:260:1:1::93
1.40%AS34779
T-2-AS
62a01-260-4042--2.link6.t-2.net
2a01:260:4042::2
1.70%AS34779
T-2-AS
4/4 2.2ms4/4 2.4ms61500(none)
prb2001:678:1ec::1
AS42700

What was measured. From SLO host (6connect) we tested AS42700 (REALIS-AS - Realis Informacijske tehnologije d.o.o.) using (probe) (2001:678:1ec::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.2/2.4 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-4042--2.link6.t-2.net [2a01:260:4042::2] in AS34779 (T-2-AS). The path never entered the destination network (AS42700 REALIS-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS42700 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS42700 details →

AS43061StelkomPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:d90:2000:e001::1d · in-prefix path hop · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:412.20%AS50673
Serverius-as
52a03:5f80:7::230:18544.00%-
6ip6-2a02-2720-100b-1c--1.euroweb.ro
2a02:2720:100b:1c::1
40.60%AS6663
TTI-NET
7ip6-2a02-2720-100b-1c--2.euroweb.ro
2a02:2720:100b:1c::2
46.80%AS6663
TTI-NET
82a02:d90:2000:e001::1d47.00%AS43061
SI-STELKOM
4/4 47.1ms4/4 47.6ms8 ✓1500(none)
rtr2a02:d90:2000:e001::1d
prb2a02:d90::1
AS43061

What was measured. From NL host (go6lab) we tested AS43061 (SI-STELKOM - Stelkom d.o.o.) using (in-prefix path hop) (2a02:d90:2000:e001::1d). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 47.1/47.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:d90:2000:e001::1d in AS43061 (SI-STELKOM). The path completed cleanly to the destination.

Likely problem: none. AS43061 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43061 details →

SLO host (6connect)open
Target: 2a02:d90:2000:e001::1d · in-prefix path hop · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46::4:30615.20%AS51988
ARNES-SIX
52a02:d90:2000:e001::1d1.40%AS43061
SI-STELKOM
4/4 1.4ms4/4 1.8ms5 ✓1500(none)
rtr2a02:d90:2000:e001::1d
prb2a02:d90::1
AS43061

What was measured. From SLO host (6connect) we tested AS43061 (SI-STELKOM - Stelkom d.o.o.) using (in-prefix path hop) (2a02:d90:2000:e001::1d). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.4/1.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:d90:2000:e001::1d in AS43061 (SI-STELKOM). The path completed cleanly to the destination.

Likely problem: none. AS43061 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43061 details →

AS43128WebtasyRFC 4890 ✗RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:ec:260c:9002::1 · ns1.freedns.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.20%AS203993
STEFFANN-DC-AS
2* * *---
32a00:1ca8:1::1942.10%AS50673
Serverius-as
42a03:3f40::10:412.10%AS50673
Serverius-as
5* * *---
6* * *---
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.80%AS174
COGENT-174
8* * *---
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
24.00%AS174
COGENT-174
10be7244.agr62.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:276e
24.00%AS174
COGENT-174
11be3189.rcr61.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:4ac5
30.20%AS174
COGENT-174
12be3191.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:e7a
29.30%AS174
COGENT-174
132001:978:2:39::a:229.20%AS174
COGENT-174
14fc00:0:1f00:b000::530.10%-
15ns1.freedns.si
2a02:ec:260c:9002::1
31.20%AS43128
DHH-AS
4/4 29.1ms4/4 29.3ms15 ✓1500(none)
NS2a02:ec:260c:9002::1 ns1.freedns.si
AS43128

What was measured. From NL host (go6lab) we tested AS43128 (DHH-AS - Webtasy, d.o.o.) using ns1.freedns.si (2a02:ec:260c:9002::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.1/29.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 15 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.freedns.si [2a02:ec:260c:9002::1] in AS43128 (DHH-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS43128 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43128 details →

SLO host (6connect)open
Target: 2a02:ec:260c:9002::1 · ns1.freedns.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
3* * *-40%-
42001:7f8:46::4:31281.60%AS51988
ARNES-SIX
5fc00:0:1f00:b000::51.10%-
6ns1.freedns.si
2a02:ec:260c:9002::1
1.10%AS43128
DHH-AS
rate-limited: hop 3
4/4 1.3ms4/4 1.6ms6 ✓1500(none)
NS2a02:ec:260c:9002::1 ns1.freedns.si
AS43128

What was measured. From SLO host (6connect) we tested AS43128 (DHH-AS - Webtasy, d.o.o.) using ns1.freedns.si (2a02:ec:260c:9002::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.3/1.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.freedns.si [2a02:ec:260c:9002::1] in AS43128 (DHH-AS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (40%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS43128 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43128 details →

AS43351GorenjePIRFC 4890 ✗RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:2dd8::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.90%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1943.80%AS50673
Serverius-as
42a03:3f40::10:412.60%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
3.80%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.20%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
27.00%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
27.20%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.30%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
26.10%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
27.20%AS5405
INTERDOTLINK
122a11:4142:2002::126.90%AS5405
INTERDOTLINK
132a00:ee1:4500:1::230.60%AS5603
SIOL-NET
142001:67c:2dd8::231.20%AS43351
GORENJE-SI-AS
4/4 30.4ms4/4 30.8ms14 ✓1500(none)
hit2001:67c:2dd8::2
hit2001:67c:2dd8::3
prb2001:67c:2dd8::1
AS43351

What was measured. From NL host (go6lab) we tested AS43351 (GORENJE-SI-AS - Gorenje, d.o.o.) using (external source) (2001:67c:2dd8::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 30.4/30.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 14 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:2dd8::2 in AS43351 (GORENJE-SI-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS43351 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43351 details →

SLO host (6connect)open
Target: 2001:67c:2dd8::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::133.860%AS5603
SIOL-NET
42a00:ee1:4500:1::24.70%AS5603
SIOL-NET
52001:67c:2dd8::26.80%AS43351
GORENJE-SI-AS
rate-limited: hop 3
4/4 5.3ms4/4 5.1ms5 ✓1500(none)
hit2001:67c:2dd8::2
hit2001:67c:2dd8::3
prb2001:67c:2dd8::1
AS43351

What was measured. From SLO host (6connect) we tested AS43351 (GORENJE-SI-AS - Gorenje, d.o.o.) using (external source) (2001:67c:2dd8::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 5.3/5.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:2dd8::2 in AS43351 (GORENJE-SI-AS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (60%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS43351 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS43351 details →

AS44549MEGA MPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2a06:c180:2::face · (external source) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.40%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:412.90%AS50673
Serverius-as
5* * *-90%-
6* * *---
7be2950.ccr42.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:482a
12.20%AS174
COGENT-174
8* * *---
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
23.430%AS174
COGENT-174
10be3935.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:274e
24.10%AS174
COGENT-174
11be3189.rcr61.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:4ac5
30.40%AS174
COGENT-174
12be3191.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:e7a
30.50%AS174
COGENT-174
132001:978:2:39::8:227.40%AS174
COGENT-174
142a02:d68:2:9::127.90%AS12778
SGN
152a02:d68:c:100e::228.90%AS12778
SGN
162a06:c180::1028.70%AS44549
MEGA-M-AS
172a06:c180:2::face33.90%AS44549
MEGA-M-AS
rate-limited: hop 5, hop 9
4/4 37.4ms4/4 41.5ms17 ✓1500(none)
atl2a06:c180:2::face
hit2a06:c180:2::1
hit2a06:c180::10
hit2a06:c180::2
hit2a06:c182:1::1
… +2 more
2a06:c180:2::face (external source) atl
2a06:c180:2::1 (external source) hit
2a06:c180::10 (external source) hit
2a06:c180::2 (external source) hit
2a06:c182:1::1 (external source) hit
2a06:c182:1::2 (external source) hit
2a06:c180::1 (probe) prb
AS44549

What was measured. From NL host (go6lab) we tested AS44549 (MEGA-M-AS - MEGA M, d.o.o.) using (external source) (2a06:c180:2::face). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 37.4/41.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 17 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a06:c180:2::face in AS44549 (MEGA-M-AS). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (90%, AS174, COGENT-174), hop 9 (30%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS44549 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44549 details →

SLO host (6connect)open
Target: 2a06:c180:2::face · (external source) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.60%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::17.5-AS56635
XENYA
4six2.mega-m.net
2001:7f8:46:0:1:0:4:4549
4.30%AS51988
ARNES-SIX
52a06:c180::102.40%AS44549
MEGA-M-AS
62a06:c180:2::face15.50%AS44549
MEGA-M-AS
4/4 35.3ms4/4 15.2ms6 ✓1500(none)
atl2a06:c180:2::face
hit2a06:c180:2::1
hit2a06:c180::10
hit2a06:c180::2
hit2a06:c182:1::1
… +2 more
2a06:c180:2::face (external source) atl
2a06:c180:2::1 (external source) hit
2a06:c180::10 (external source) hit
2a06:c180::2 (external source) hit
2a06:c182:1::1 (external source) hit
2a06:c182:1::2 (external source) hit
2a06:c180::1 (probe) prb
AS44549

What was measured. From SLO host (6connect) we tested AS44549 (MEGA-M-AS - MEGA M, d.o.o.) using (external source) (2a06:c180:2::face). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 35.3/15.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a06:c180:2::face in AS44549 (MEGA-M-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS44549 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44549 details →

AS44968iPromPIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:149c:1100::1 · in-prefix path hop · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.40%AS50673
Serverius-as
42a03:3f40::10:411.90%AS50673
Serverius-as
5* * *-0%-
6* * *-0%-
7* * *-0%-
82001:850:501:bc::224.00%AS8447
A1TELEKOM-AT
92001:15c2:4:10::13826.20%AS21283
A1SI-AS
102001:67c:149c:1100::126.10%AS44968
IPROM-AS
4/4 25.4ms4/4 25.6ms10 ✓1500(none)
rtr2001:67c:149c:1100::1
AS44968

What was measured. From NL host (go6lab) we tested AS44968 (IPROM-AS - IPROM d.o.o) using (in-prefix path hop) (2001:67c:149c:1100::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 25.4/25.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 10 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:149c:1100::1 in AS44968 (IPROM-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS44968 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44968 details →

SLO host (6connect)open
Target: 2001:67c:149c:1100::1 · in-prefix path hop · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *---
3* * *---
4six.a1.si
2001:7f8:46::2:1283
2.40%AS21283
A1 Slovenija
52001:15c2:4:10::1381.70%AS21283
A1SI-AS
62001:67c:149c:1100::16.10%AS44968
IPROM-AS
4/4 2.2ms4/4 1.7ms6 ✓1500(none)
rtr2001:67c:149c:1100::1
AS44968

What was measured. From SLO host (6connect) we tested AS44968 (IPROM-AS - IPROM d.o.o) using (in-prefix path hop) (2001:67c:149c:1100::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.2/1.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:149c:1100::1 in AS44968 (IPROM-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS44968 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44968 details →

AS44993MobikPARFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a00:1420:1:5::10 · ns1.mobik.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.40%AS50673
Serverius-as
42a03:3f40::10:412.60%AS50673
Serverius-as
5* * *---
6* * *-70%-
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.80%AS174
COGENT-174
8* * *-90%-
9be5456.ccr81.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:48a6
21.80%AS174
COGENT-174
10be4079.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::8275:3242
24.00%AS174
COGENT-174
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
29.60%AS174
COGENT-174
12te0-0-2-2.nr11.b020832-1.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:32e
33.30%AS174
COGENT-174
132001:978:2:39::629.30%AS174
COGENT-174
14* * *-0%-
15* * *-0%-
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 6, hop 8
4/4 28.9ms4/4 32.6ms131500(none)
drv2a00:1420:1:5::10 ns1.mobik.si
drv2a00:1420:1:5::11 ns2.mobik.si
hit2a00:1420:1:10::11
hit2a00:1420:1:10::14
hit2a00:1420:1:10::15
… +2 more
2a00:1420:1:5::10 ns1.mobik.si drv
2a00:1420:1:5::11 ns2.mobik.si drv
2a00:1420:1:10::11 (external source) hit
2a00:1420:1:10::14 (external source) hit
2a00:1420:1:10::15 (external source) hit
2a00:1420:1:10::16 (external source) hit
2a00:1420:1:10::32 (external source) hit
AS44993

What was measured. From NL host (go6lab) we tested AS44993 (MOBIK-AS - Mobik d.o.o.) using ns1.mobik.si (2a00:1420:1:5::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 28.9/32.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 13 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:978:2:39::6 in AS174 (COGENT-174). The path never entered the destination network (AS44993 MOBIK-AS). Responses kept coming through and including AS174 COGENT-174; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS174 COGENT-174), not at it - AS174 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 6 (70%, AS174, COGENT-174), hop 8 (90%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS44993 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44993 details →

SLO host (6connect)open
Target: 2a00:1420:1:5::10 · ns1.mobik.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.90%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.60%AS5603
SIOL-NET
42a00:ee0:1:10::21.10%AS5603
SIOL-NET
52001:1900:5:2:2:0:11c:d4910.20%AS3356
LEVEL3
6* * *-0%-
72001:978:2:39::619.50%AS174
COGENT-174
8* * *-0%-
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 19.2ms4/4 18.6ms71500(none)
drv2a00:1420:1:5::10 ns1.mobik.si
drv2a00:1420:1:5::11 ns2.mobik.si
hit2a00:1420:1:10::11
hit2a00:1420:1:10::14
hit2a00:1420:1:10::15
… +2 more
2a00:1420:1:5::10 ns1.mobik.si drv
2a00:1420:1:5::11 ns2.mobik.si drv
2a00:1420:1:10::11 (external source) hit
2a00:1420:1:10::14 (external source) hit
2a00:1420:1:10::15 (external source) hit
2a00:1420:1:10::16 (external source) hit
2a00:1420:1:10::32 (external source) hit
AS44993

What was measured. From SLO host (6connect) we tested AS44993 (MOBIK-AS - Mobik d.o.o.) using ns1.mobik.si (2a00:1420:1:5::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 19.2/18.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:978:2:39::6 in AS174 (COGENT-174). The path never entered the destination network (AS44993 MOBIK-AS). Responses kept coming through and including AS174 COGENT-174; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS174 COGENT-174), not at it - AS174 did reply.

Other signals.

  • TCP SYN was accepted (open) on tcp/443 and refused (RST) on tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS44993 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS44993 details →

AS47904ARCTURPIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:2324:14::153 · www.arctur.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:335.50%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
34.20%-
62a01-260-1-1--49.core6.t-2.net
2a01:260:1:1::49
39.70%AS34779
T-2-AS
72a01:260:1069::e43.10%AS34779
T-2-AS
8fw.arctur.si
2001:67c:2324:47::5
42.10%AS47904
SI-ARCTUR
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 41.3ms4/4 41.6ms81500(none)
cur2001:67c:2324:14::153 www.arctur.si
NS2001:67c:2324:14::155 dns1.arctur.si
MX2001:67c:2324:14::170 exchange-frontend.arctur.si
MX2001:67c:2324:14::151 mx1.arctur.si
MX2001:67c:2324:14::152 mx2.arctur.si
… +5 more
2001:67c:2324:14::153 www.arctur.si cur
2001:67c:2324:14::155 dns1.arctur.si NS
2001:67c:2324:14::170 exchange-frontend.arctur.si MX
2001:67c:2324:14::151 mx1.arctur.si MX
2001:67c:2324:14::152 mx2.arctur.si MX
2001:67c:2324:47::1 gw.arctur.si drv
2001:67c:2324:47::2 gw.arctur.si drv
2001:67c:2324:47::3 gw.arctur.si drv
2001:67c:2324:501::1 gw.arctur.si drv
2001:67c:2324:501::2 gw.arctur.si drv
AS47904

What was measured. From NL host (go6lab) we tested AS47904 (SI-ARCTUR - ARCTUR d.o.o.) using www.arctur.si (2001:67c:2324:14::153). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 41.3/41.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was fw.arctur.si [2001:67c:2324:47::5] in AS47904 (SI-ARCTUR). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS47904 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS47904 details →

SLO host (6connect)open
Target: 2001:67c:2324:14::153 · www.arctur.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
3* * *-90%-
42001:7f8:46::4:30615.40%AS51988
ARNES-SIX
52a02:d90:2000:e001::1d1.30%AS43061
SI-STELKOM
62a02:d90:7000:a001::23.80%AS43061
SI-STELKOM
7fw.arctur.si
2001:67c:2324:47::5
3.70%AS47904
SI-ARCTUR
8* * *-0%-
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 4.1ms4/4 5.2ms71500(none)
cur2001:67c:2324:14::153 www.arctur.si
NS2001:67c:2324:14::155 dns1.arctur.si
MX2001:67c:2324:14::170 exchange-frontend.arctur.si
MX2001:67c:2324:14::151 mx1.arctur.si
MX2001:67c:2324:14::152 mx2.arctur.si
… +5 more
2001:67c:2324:14::153 www.arctur.si cur
2001:67c:2324:14::155 dns1.arctur.si NS
2001:67c:2324:14::170 exchange-frontend.arctur.si MX
2001:67c:2324:14::151 mx1.arctur.si MX
2001:67c:2324:14::152 mx2.arctur.si MX
2001:67c:2324:47::1 gw.arctur.si drv
2001:67c:2324:47::2 gw.arctur.si drv
2001:67c:2324:47::3 gw.arctur.si drv
2001:67c:2324:501::1 gw.arctur.si drv
2001:67c:2324:501::2 gw.arctur.si drv
AS47904

What was measured. From SLO host (6connect) we tested AS47904 (SI-ARCTUR - ARCTUR d.o.o.) using www.arctur.si (2001:67c:2324:14::153). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 4.1/5.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was fw.arctur.si [2001:67c:2324:47::5] in AS47904 (SI-ARCTUR). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS47904 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS47904 details →

AS47917RTV SlovenijaPARFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a02:7a8::3 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *---
32a00:1ca8:1::1943.210%AS50673
Serverius-as
42a03:3f40::10:412.00%AS50673
Serverius-as
52a03:5f80:7::230:18544.10%-
6ip6-2a02-2720-100b-1c--1.euroweb.ro
2a02:2720:100b:1c::1
40.60%AS6663
TTI-NET
7ip6-2a02-2720-100b-1c--2.euroweb.ro
2a02:2720:100b:1c::2
47.20%AS6663
TTI-NET
82a02:7a8::346.70%AS47917
RTVSLO-ASN
rate-limited: hop 3
4/4 47.7ms4/4 47.1ms8 ✓1500(none)
hit2a02:7a8::3
hit2a02:7a8::4
hit2a02:7a8::8
prb2a02:7a8::2
AS47917

What was measured. From NL host (go6lab) we tested AS47917 (RTVSLO-ASN - RTV Slovenija) using (external source) (2a02:7a8::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 47.7/47.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:7a8::3 in AS47917 (RTVSLO-ASN). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS47917 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS47917 details →

SLO host (6connect)open
Target: 2a02:7a8::3 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
3* * *---
42a02:7a8::34.00%AS47917
RTVSLO-ASN
4/4 2.0ms4/4 1.7ms4 ✓1500(none)
hit2a02:7a8::3
hit2a02:7a8::4
hit2a02:7a8::8
prb2a02:7a8::2
AS47917

What was measured. From SLO host (6connect) we tested AS47917 (RTVSLO-ASN - RTV Slovenija) using (external source) (2a02:7a8::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.0/1.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:7a8::3 in AS47917 (RTVSLO-ASN). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS47917 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS47917 details →

AS48894Optimus ITPI/PARFC 4890 ✓RPKI ✓ 3/3ASPA -NL host (go6lab)open
Target: 2001:67c:2468:8000:0:122:12:12 · dns.optimus.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
3.50%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::19411.00%AS50673
Serverius-as
42a03:3f40::10:4110.80%AS50673
Serverius-as
5* * *-0%-
6* * *-0%-
7* * *-0%-
82001:850:501:bc::223.20%AS8447
A1TELEKOM-AT
92001:15c2:4:bad:babe::4225.30%AS21283
A1SI-AS
10* * *---
112001:67c:2468:8000:0:122:12:1226.00%AS48894
OPTIMUS-AS
4/4 25.0ms4/4 25.2ms11 ✓1500(none)
drv2001:67c:2468:8000:0:122:12:12 dns.optimus.si
drv2001:67c:2468:7a00:5be2:632d:0:1 git.optimus.si
drv2001:67c:2468::115:d05:d052 ns2.optimus.si
atl2a03:f80:386:301a::1
hit2001:67c:2468:7ac8::203
… +5 more
2001:67c:2468:8000:0:122:12:12 dns.optimus.si drv
2001:67c:2468:7a00:5be2:632d:0:1 git.optimus.si drv
2001:67c:2468::115:d05:d052 ns2.optimus.si drv
2a03:f80:386:301a::1 (external source) atl
2001:67c:2468:7ac8::203 (external source) hit
2001:67c:2468::111:5:17 (external source) hit
2001:67c:2468::111:5:18 (external source) hit
2001:67c:2468::111:5:25 (external source) hit
2001:67c:2468::111:5:26 (external source) hit
2001:67c:2468::111:5:30 (external source) hit
AS48894

What was measured. From NL host (go6lab) we tested AS48894 (OPTIMUS-AS - Optimus IT d.o.o.) using dns.optimus.si (2001:67c:2468:8000:0:122:12:12). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 25.0/25.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 11 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:2468:8000:0:122:12:12 in AS48894 (OPTIMUS-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS48894 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS48894 details →

SLO host (6connect)open
Target: 2001:67c:2468:8000:0:122:12:12 · dns.optimus.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *---
3* * *---
4six2.optimus.si
2001:7f8:46:0:1:0:4:8894
1.40%AS51988
ARNES-SIX
52001:67c:2468:8000:0:122:12:121.40%AS48894
OPTIMUS-AS
4/4 3.1ms4/4 1.2ms5 ✓1500(none)
drv2001:67c:2468:8000:0:122:12:12 dns.optimus.si
drv2001:67c:2468:7a00:5be2:632d:0:1 git.optimus.si
drv2001:67c:2468::115:d05:d052 ns2.optimus.si
atl2a03:f80:386:301a::1
hit2001:67c:2468:7ac8::203
… +5 more
2001:67c:2468:8000:0:122:12:12 dns.optimus.si drv
2001:67c:2468:7a00:5be2:632d:0:1 git.optimus.si drv
2001:67c:2468::115:d05:d052 ns2.optimus.si drv
2a03:f80:386:301a::1 (external source) atl
2001:67c:2468:7ac8::203 (external source) hit
2001:67c:2468::111:5:17 (external source) hit
2001:67c:2468::111:5:18 (external source) hit
2001:67c:2468::111:5:25 (external source) hit
2001:67c:2468::111:5:26 (external source) hit
2001:67c:2468::111:5:30 (external source) hit
AS48894

What was measured. From SLO host (6connect) we tested AS48894 (OPTIMUS-AS - Optimus IT d.o.o.) using dns.optimus.si (2001:67c:2468:8000:0:122:12:12). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.1/1.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:2468:8000:0:122:12:12 in AS48894 (OPTIMUS-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS48894 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS48894 details →

AS50344CDE ITPIRFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2001:67c:26fc:ffff::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.920%AS50673
Serverius-as
42a03:3f40::10:334.50%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
33.70%-
62a01-260-1-1--9d.core6.t-2.net
2a01:260:1:1::9d
35.50%AS34779
T-2-AS
7* * *-0%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 40.5ms4/4 40.7ms61500(none)
hit2001:67c:26fc:ffff::1
hit2001:67c:26fc:ffff::2
AS50344

What was measured. From NL host (go6lab) we tested AS50344 (SI-CDE-IT - CDE IT, informacijske resitve d.o.o.) using (external source) (2001:67c:26fc:ffff::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 40.5/40.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-1-1--9d.core6.t-2.net [2a01:260:1:1::9d] in AS34779 (T-2-AS). The path never entered the destination network (AS50344 SI-CDE-IT). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS50344 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS50344 details →

SLO host (6connect)open
Target: 2001:67c:26fc:ffff::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.20%*AS8038
6CONNECT
2* * *---
3* * *---
4six.t-2.si
2001:7f8:46::3:4779
1.30%AS34779
T-2
52a01-260-1-1--9b.core6.t-2.net
2a01:260:1:1::9b
1.80%AS34779
T-2-AS
6* * *-0%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 1.5ms4/4 3.3ms51500(none)
hit2001:67c:26fc:ffff::1
hit2001:67c:26fc:ffff::2
AS50344

What was measured. From SLO host (6connect) we tested AS50344 (SI-CDE-IT - CDE IT, informacijske resitve d.o.o.) using (external source) (2001:67c:26fc:ffff::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.5/3.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-1-1--9b.core6.t-2.net [2a01:260:1:1::9b] in AS34779 (T-2-AS). The path never entered the destination network (AS50344 SI-CDE-IT). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Likely problem: none. AS50344 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS50344 details →

AS51615KaTV Nova GoricaPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:2590:0:226::226:10 · ns1.dikadom.com · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.80%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.210%AS50673
Serverius-as
42a03:3f40::10:335.30%AS50673
Serverius-as
52001:7f8:13::a500:9119:110.5--
6sn-lju-hu-0-1-0-0-81-slo.ntwk.softnet.si
2a02:800:1:6000::1
24.2-AS9119
SOFTNET-AS
72a02:800:71:2000::228.30%AS9119
SOFTNET-AS
8kw-dmz3-bgp-viv6.core.kate-wing-si
2a02:2590:0:2128::10
26.70%AS51615
KATENG-ASN
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 29.9ms4/4 28.2ms81500(none)
NS2a02:2590:0:226::226:10 ns1.dikadom.com
NS2a02:2590:0:226::227:10 ns3.dikadom.com
whois2a02:2590:0:224::aaaa:11 ns1.kate-wing.si
whois2a02:2590:0:225::bbbb:11 ns2.kate-wing.si
hit2a02:2590:0:1128::6
… +5 more
2a02:2590:0:226::226:10 ns1.dikadom.com NS
2a02:2590:0:226::227:10 ns3.dikadom.com NS
2a02:2590:0:224::aaaa:11 ns1.kate-wing.si whois
2a02:2590:0:225::bbbb:11 ns2.kate-wing.si whois
2a02:2590:0:1128::6 (external source) hit
2a02:2590:0:1226:1226:1227:217:1 (external source) hit
2a02:2590:0:1226:1226:1227:217:11 (external source) hit
2a02:2590:0:1226:1226:1227:217:3 (external source) hit
2a02:2590:0:1226:1226:1227:217:40 (external source) hit
2a02:2590:0:1226:1226:1227:217:9 (external source) hit
AS51615

What was measured. From NL host (go6lab) we tested AS51615 (KATENG-ASN - Zavod Kabelska televizija Nova gorica) using ns1.dikadom.com (2a02:2590:0:226::226:10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.9/28.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was kw-dmz3-bgp-viv6.core.kate-wing-si [2a02:2590:0:2128::10] in AS51615 (KATENG-ASN). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS51615 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS51615 details →

SLO host (6connect)open
Target: 2a02:2590:0:226::226:10 · ns1.dikadom.com · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-70%-
42001:7f8:46:0:1::91194.390%AS51988
ARNES-SIX
52a02:800:71:2000::22.50%AS9119
SOFTNET-AS
6kw-dmz3-bgp-viv6.core.kate-wing-si
2a02:2590:0:2128::10
2.80%AS51615
KATENG-ASN
7* * *-0%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3, hop 4
4/4 3.4ms4/4 3.6ms61500(none)
NS2a02:2590:0:226::226:10 ns1.dikadom.com
NS2a02:2590:0:226::227:10 ns3.dikadom.com
whois2a02:2590:0:224::aaaa:11 ns1.kate-wing.si
whois2a02:2590:0:225::bbbb:11 ns2.kate-wing.si
hit2a02:2590:0:1128::6
… +5 more
2a02:2590:0:226::226:10 ns1.dikadom.com NS
2a02:2590:0:226::227:10 ns3.dikadom.com NS
2a02:2590:0:224::aaaa:11 ns1.kate-wing.si whois
2a02:2590:0:225::bbbb:11 ns2.kate-wing.si whois
2a02:2590:0:1128::6 (external source) hit
2a02:2590:0:1226:1226:1227:217:1 (external source) hit
2a02:2590:0:1226:1226:1227:217:11 (external source) hit
2a02:2590:0:1226:1226:1227:217:3 (external source) hit
2a02:2590:0:1226:1226:1227:217:40 (external source) hit
2a02:2590:0:1226:1226:1227:217:9 (external source) hit
AS51615

What was measured. From SLO host (6connect) we tested AS51615 (KATENG-ASN - Zavod Kabelska televizija Nova gorica) using ns1.dikadom.com (2a02:2590:0:226::226:10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.4/3.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was kw-dmz3-bgp-viv6.core.kate-wing-si [2a02:2590:0:2128::10] in AS51615 (KATENG-ASN). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (70%, AS56635, XENYA), hop 4 (90%, AS51988, ARNES-SIX) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS51615 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS51615 details →

AS51790SIELPI/PARFC 4890 ✓RPKI ✓ 4/4ASPA -NL host (go6lab)open
Target: 2a02:28b0:53::53 · dns1.siel.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.80%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.90%*AS203993
STEFFANN-DC-AS
3* * *---
4be1.core3.ams1.he.net
2001:470:e:5e::1
4.40%AS6939
HURRICANE
5be2.core4.fra1.he.net
2001:470:e:38::2
10.90%AS6939
HURRICANE
6be3.core2.fra2.he.net
2001:470:e:5a::1
11.50%AS6939
HURRICANE
7e0-33.core2.muc1.he.net
2001:470:0:2ef::2
14.50%AS6939
HURRICANE
8100ge0-0-0-23.core1.vie1.he.net
2001:470:0:41d::1
20.90%AS6939
HURRICANE
9e0-36.core1.lju1.he.net
2001:470:0:578::2
26.40%AS6939
HURRICANE
102a02:28b0:101:800::129.90%AS51790
SIEL
112a02:28b0:101:866::129.20%AS51790
SIEL
122a02:28b0:101:825::137.80%AS51790
SIEL
13dns1.siel.si
2a02:28b0:53::53
24.2-AS51790
SIEL
4/4 24.7ms4/4 24.8ms13 ✓1500(none)
NS2a02:28b0:53::53 dns1.siel.si
hit2a02:28b0:101:1299::1
hit2a02:28b0:101:1299::2
hit2a02:28b0:101:1499::1
hit2a02:28b0:101:1499::2
… +5 more
2a02:28b0:53::53 dns1.siel.si NS
2a02:28b0:101:1299::1 (external source) hit
2a02:28b0:101:1299::2 (external source) hit
2a02:28b0:101:1499::1 (external source) hit
2a02:28b0:101:1499::2 (external source) hit
2a02:28b0:101:1699::1 (external source) hit
2a02:28b0:101:1699::2 (external source) hit
2a02:28b0:101:1::1 (external source) hit
2a02:28b0:101:247::1 (external source) hit
2a02:28b0:101:800::1 (in-prefix path hop) rtr
AS51790

What was measured. From NL host (go6lab) we tested AS51790 (SIEL - SIEL, d.o.o.) using dns1.siel.si (2a02:28b0:53::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 24.7/24.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 13 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was dns1.siel.si [2a02:28b0:53::53] in AS51790 (SIEL). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS51790 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS51790 details →

SLO host (6connect)open
Target: 2a02:28b0:53::53 · dns1.siel.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46::5:17901.00%AS51988
ARNES-SIX
52a02:28b0:101:824::13.60%AS51790
SIEL
62a02:28b0:101:823::18.90%AS51790
SIEL
72a02:28b0:101:3::15.60%AS51790
SIEL
8dns1.siel.si
2a02:28b0:53::53
1.80%AS51790
SIEL
4/4 1.2ms4/4 2.7ms8 ✓1500(none)
NS2a02:28b0:53::53 dns1.siel.si
hit2a02:28b0:101:1299::1
hit2a02:28b0:101:1299::2
hit2a02:28b0:101:1499::1
hit2a02:28b0:101:1499::2
… +5 more
2a02:28b0:53::53 dns1.siel.si NS
2a02:28b0:101:1299::1 (external source) hit
2a02:28b0:101:1299::2 (external source) hit
2a02:28b0:101:1499::1 (external source) hit
2a02:28b0:101:1499::2 (external source) hit
2a02:28b0:101:1699::1 (external source) hit
2a02:28b0:101:1699::2 (external source) hit
2a02:28b0:101:1::1 (external source) hit
2a02:28b0:101:247::1 (external source) hit
2a02:28b0:101:800::1 (in-prefix path hop) rtr
AS51790

What was measured. From SLO host (6connect) we tested AS51790 (SIEL - SIEL, d.o.o.) using dns1.siel.si (2a02:28b0:53::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.2/2.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was dns1.siel.si [2a02:28b0:53::53] in AS51790 (SIEL). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS51790 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS51790 details →

AS52035D1PI/PARPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a0e:ce40:ffff::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.60%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.60%AS50673
Serverius-as
42a03:3f40::10:413.60%AS50673
Serverius-as
52001:b28:3ff::1b1b:0:125.60%AS31500
GNM-AS
6* * *---
7be47.core4.fra1.he.net
2001:470:e:f::2
29.540%AS6939
HURRICANE
8be3.core2.fra2.he.net
2001:470:e:5a::1
30.60%AS6939
HURRICANE
9100ge0-0-0-3.core1.vie1.he.net
2001:470:0:7ef::2
40.80%AS6939
HURRICANE
10100ge0-0-0-23.core1.vie1.he.net
2001:470:0:41d::1
40.60%AS6939
HURRICANE
11e0-36.core1.lju1.he.net
2001:470:0:578::2
44.00%AS6939
HURRICANE
122001:470:435:1::243.00%AS6939
HURRICANE
132a02:28b0:101:825::1102.80%AS51790
SIEL
142a02:28b0:101:825::146.00%AS51790
SIEL
152a0e:ce40:ffff::249.740%AS52035
D1
rate-limited: hop 7, hop 15
3/4 49.7ms0/4 -15 ✓1420(none)
hit2a0e:ce40:ffff::2
prb2a0e:ce40::1
AS52035

What was measured. From NL host (go6lab) we tested AS52035 (D1 - D1, informacijske tehnologije, d.o.o.) using (external source) (2a0e:ce40:ffff::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (3/4 replies, avg 49.7 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1420) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2a02:28b0:101:859::2 at hop 19 with announced MTU 1420. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test attempted but natural Echo Reply at 1300B was already split into IPv6 fragments without our PTB intervention -- the destination's stack has a cached path MTU below 1300B from a previously-honored ICMPv6 Type 2, which is itself evidence that this destination honors PTB on this path.; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 15 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0e:ce40:ffff::2 in AS52035 (D1). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 7 (40%, AS6939, HURRICANE), hop 15 (40%, AS52035, D1) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS52035 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS52035 details →

SLO host (6connect)open
Target: 2a0e:ce40:ffff::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.10%*AS8038
6CONNECT
2* * *-0%*-
32a03:a100:0:201:1::11.730%AS56635
XENYA
42001:7f8:46::5:17901.50%AS51988
ARNES-SIX
52a02:28b0:101:1499::21.10%AS51790
SIEL
62a02:28b0:101:800::11.60%AS51790
SIEL
72a02:28b0:101:825::18.90%AS51790
SIEL
82a02:28b0:101:859::23.50%AS51790
SIEL
92a0e:ce40:ffff::28.720%AS52035
D1
rate-limited: hop 3, hop 9
3/4 8.7ms0/4 -9 ✓1420(none)
hit2a0e:ce40:ffff::2
prb2a0e:ce40::1
AS52035

What was measured. From SLO host (6connect) we tested AS52035 (D1 - D1, informacijske tehnologije, d.o.o.) using (external source) (2a0e:ce40:ffff::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (3/4 replies, avg 8.7 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1420) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2a02:28b0:101:859::2 at hop 13 with announced MTU 1420. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0e:ce40:ffff::2 in AS52035 (D1). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA), hop 9 (20%, AS52035, D1) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS52035 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS52035 details →

AS56635XenyaPARFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2a03:a100:0:200::25 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
3* * *---
4be1.core3.ams1.he.net
2001:470:e:5e::1
5.60%AS6939
HURRICANE
5be2.core4.fra1.he.net
2001:470:e:38::2
10.90%AS6939
HURRICANE
6be3.core2.fra2.he.net
2001:470:e:5a::1
11.90%AS6939
HURRICANE
7e0-33.core2.muc1.he.net
2001:470:0:2ef::2
15.40%AS6939
HURRICANE
8100ge0-0-0-23.core1.vie1.he.net
2001:470:0:41d::1
22.00%AS6939
HURRICANE
9xenya-d-o-o.e0-1.core1.lju1.he.net
2001:470:1:5be::2
25.10%AS6939
HURRICANE
102a03:a100:0:200::2524.50%AS56635
XENYA
4/4 23.9ms4/4 24.5ms10 ✓1500(none)
hit2a03:a100:0:200::25
hit2a03:a100:0:200::28
hit2a03:a100:0:201:1::2
hit2a03:a100:0:210::2
hit2a03:a100:0:211::2
… +3 more
2a03:a100:0:200::25 (external source) hit
2a03:a100:0:200::28 (external source) hit
2a03:a100:0:201:1::2 (external source) hit
2a03:a100:0:210::2 (external source) hit
2a03:a100:0:211::2 (external source) hit
2a03:a100:0:ff:1::1 (external source) hit
2a03:a100:0:ff:1::2 (external source) hit
2a03:a100:0:201:1::1 (in-prefix path hop) rtr
AS56635

What was measured. From NL host (go6lab) we tested AS56635 (XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana) using (external source) (2a03:a100:0:200::25). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 23.9/24.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 10 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a03:a100:0:200::25 in AS56635 (XENYA). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS56635 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS56635 details →

SLO host (6connect)open
Target: 2a03:a100:0:200::25 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
3* * *---
42a03:a100:0:200::250.60%AS56635
XENYA
4/4 1.1ms4/4 0.8ms4 ✓1500(none)
hit2a03:a100:0:200::25
hit2a03:a100:0:200::28
hit2a03:a100:0:201:1::2
hit2a03:a100:0:210::2
hit2a03:a100:0:211::2
… +3 more
2a03:a100:0:200::25 (external source) hit
2a03:a100:0:200::28 (external source) hit
2a03:a100:0:201:1::2 (external source) hit
2a03:a100:0:210::2 (external source) hit
2a03:a100:0:211::2 (external source) hit
2a03:a100:0:ff:1::1 (external source) hit
2a03:a100:0:ff:1::2 (external source) hit
2a03:a100:0:201:1::1 (in-prefix path hop) rtr
AS56635

What was measured. From SLO host (6connect) we tested AS56635 (XENYA - XENYA inzeniring, proizvodnja in trgovina, d.o.o. Ljubljana) using (external source) (2a03:a100:0:200::25). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.1/0.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a03:a100:0:200::25 in AS56635 (XENYA). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS56635 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS56635 details →

AS58046Ministrstvo za dig. preobrazboPI/PARFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a00:d443:ffff:ff09::120 · ns1s.gov.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:412.90%AS50673
Serverius-as
5* * *-70%-
6* * *-90%-
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.50%AS174
COGENT-174
8* * *---
9be9456.ccr82.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:3f8d
22.90%AS174
COGENT-174
10be3935.agr61.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:274e
24.80%AS174
COGENT-174
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
29.70%AS174
COGENT-174
12be9462.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:11a5
30.60%AS174
COGENT-174
13* * *---
14rljtpl1.bb.arnes.si
2001:1470:a:74::b
29.80%AS2107
ARNES-NET
152001:1470:a:7b30.40%-
162001:1470:a:7f::130.10%AS2107
ARNES-NET
17po4.larnes7.bb.arnes.si
2001:1470:a:83::1
31.40%AS2107
ARNES-NET
182001:1470:3004:13::230.20%AS2107
ARNES-NET
19* * *-0%-
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 5, hop 6
4/4 28.4ms4/4 28.9ms181500(none)
NS2a00:d443:ffff:ff09::120 ns1s.gov.si
NS2a00:d443:ffff:ff09::121 ns2s.gov.si
AS58046

What was measured. From NL host (go6lab) we tested AS58046 (HKOM-AS - The Ministry of Digital Transformation) using ns1s.gov.si (2a00:d443:ffff:ff09::120). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 28.4/28.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 18 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:1470:3004:13::2 in AS2107 (ARNES-NET). The path never entered the destination network (AS58046 HKOM-AS). Responses kept coming through and including AS2107 ARNES-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS2107 ARNES-NET), not at it - AS2107 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (70%, AS174, COGENT-174), hop 6 (90%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS58046 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS58046 details →

SLO host (6connect)open
Target: 2a00:d443:ffff:ff09::120 · ns1s.gov.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.50%*AS8038
6CONNECT
2* * *---
3* * *---
4rarnes1.six.si
2001:7f8:46::2107
1.20%AS2107
Arnes
5rljijs1.bb.arnes.si
2001:1470:a:75::b
1.10%AS2107
ARNES-NET
62001:1470:a:7f::11.40%AS2107
ARNES-NET
7po4.larnes7.bb.arnes.si
2001:1470:a:83::1
2.20%AS2107
ARNES-NET
82001:1470:3004:13::22.00%AS2107
ARNES-NET
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 1.2ms4/4 1.2ms81500(none)
NS2a00:d443:ffff:ff09::120 ns1s.gov.si
NS2a00:d443:ffff:ff09::121 ns2s.gov.si
AS58046

What was measured. From SLO host (6connect) we tested AS58046 (HKOM-AS - The Ministry of Digital Transformation) using ns1s.gov.si (2a00:d443:ffff:ff09::120). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.2/1.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:1470:3004:13::2 in AS2107 (ARNES-NET). The path never entered the destination network (AS58046 HKOM-AS). Responses kept coming through and including AS2107 ARNES-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS2107 ARNES-NET), not at it - AS2107 did reply.

Other signals.

  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS58046 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS58046 details →

AS60435HumanfrogRPKI ✓ 2/2ASPA -NL host (go6lab)all blocked
Target: 2a00:a362:1:400::2 · via IPv6 Hitlist (responsive) · filter: past AS3212 (TELEMACH)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.80%AS50673
Serverius-as
42a03:3f40::10:335.70%AS50673
Serverius-as
52001:7f8:13::a500:3212:130.00%-
62a00:fc0:4320:c::a28.910%AS3212
TELEMACH
72a00:fc0:4320:c::b27.990%AS3212
TELEMACH
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 6, hop 7
0/4 -0/4 -71500past AS3212 (TELEMACH)
hit2a00:a362:1:400::2
prb2a00:a362::1
AS60435

What was measured. From NL host (go6lab) we tested AS60435 (HUMANFROG-AS - Humanfrog d.o.o.) using (external source) (2a00:a362:1:400::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. No Echo Reply was received for either size (small 0/4, 1500 B 0/4). ICMPv6 Echo to this address is fully suppressed.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. We have no Echo Reply for either size and tracepath never observed a Path-MTU drop, so this run cannot say anything definitive about ICMPv6 Type 2 / PMTUD handling toward this destination. Echo being blocked does not by itself mean PMTUD is broken - RFC 4890 recommends operators drop Echo Request inbound (or rate-limit it) while keeping Type 2 permitted, and a network that did exactly that would look identical from this kind of probe. To know for certain we would need an active TCP flow into the destination plus a forged-PTB injection test, which is outside the current measurement battery. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:fc0:4320:c::b in AS3212 (TELEMACH). The path never entered the destination network (AS60435 HUMANFROG-AS). Responses kept coming through and including AS3212 TELEMACH; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS3212 TELEMACH), not at it - AS3212 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 6 (10%, AS3212, TELEMACH), hop 7 (90%, AS3212, TELEMACH) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: the probed address is silent on every protocol - this could be a cold address (no service) or a network that drops everything inbound. Whether ICMPv6 specifically is blocked cannot be isolated from this host alone. Filter is most likely at past AS3212 (TELEMACH).

For more information click the ASN number on the far left or follow this direct link: AS60435 details →

SLO host (6connect)open
Target: 2a00:a362:1:400::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46:0:1:0:2:86821.60%AS51988
ARNES-SIX
5* * *-0%-
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 2.1ms4/4 2.0ms41500(none)
hit2a00:a362:1:400::2
prb2a00:a362::1
AS60435

What was measured. From SLO host (6connect) we tested AS60435 (HUMANFROG-AS - Humanfrog d.o.o.) using (external source) (2a00:a362:1:400::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.1/2.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:7f8:46:0:1:0:2:8682 in AS51988 (ARNES-SIX). The path never entered the destination network (AS60435 HUMANFROG-AS). Responses kept coming through and including AS51988 ARNES-SIX; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS51988 ARNES-SIX), not at it - AS51988 did reply.

Likely problem: none. AS60435 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS60435 details →

AS62255BiMajLinkPI/PARFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a10:180:0:2::14 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.60%AS50673
Serverius-as
42a03:3f40::10:412.60%AS50673
Serverius-as
52a10:180:0:2::1410.10%AS62255
BEMYLINK
4/4 9.6ms4/4 10.0ms5 ✓1500(none)
hit2a10:180:0:2::14
hit2a10:180:0:2::15
hit2a10:180:0:2::20
hit2a10:180:0:2::21
hit2a10:180:0:2::42
… +2 more
2a10:180:0:2::14 (external source) hit
2a10:180:0:2::15 (external source) hit
2a10:180:0:2::20 (external source) hit
2a10:180:0:2::21 (external source) hit
2a10:180:0:2::42 (external source) hit
2a10:180:0:2::51 (external source) hit
2a10:180:0:2::13 (in-prefix path hop) rtr
AS62255

What was measured. From NL host (go6lab) we tested AS62255 (BEMYLINK - BiMajLink d.o.o.) using (external source) (2a10:180:0:2::14). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 9.6/10.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a10:180:0:2::14 in AS62255 (BEMYLINK). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS62255 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS62255 details →

SLO host (6connect)open
Target: 2a10:180:0:2::14 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.6-AS5603
SIOL-NET
42a00:ee0:1:10::22.90%AS5603
SIOL-NET
52a10:180:0:2::1419.50%AS62255
BEMYLINK
4/4 20.0ms4/4 24.0ms5 ✓1500(none)
hit2a10:180:0:2::14
hit2a10:180:0:2::15
hit2a10:180:0:2::20
hit2a10:180:0:2::21
hit2a10:180:0:2::42
… +2 more
2a10:180:0:2::14 (external source) hit
2a10:180:0:2::15 (external source) hit
2a10:180:0:2::20 (external source) hit
2a10:180:0:2::21 (external source) hit
2a10:180:0:2::42 (external source) hit
2a10:180:0:2::51 (external source) hit
2a10:180:0:2::13 (in-prefix path hop) rtr
AS62255

What was measured. From SLO host (6connect) we tested AS62255 (BEMYLINK - BiMajLink d.o.o.) using (external source) (2a10:180:0:2::14). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 20.0/24.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a10:180:0:2::14 in AS62255 (BEMYLINK). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS62255 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS62255 details →

AS197209STN STORITVEPI/PARFC 4890 ✓RPKI ✗ 1/2ASPA -NL host (go6lab)open
Target: 2001:67c:be0::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.510%AS50673
Serverius-as
42a03:3f40::10:335.60%AS50673
Serverius-as
5* * *-20%-
6* * *-50%-
72a02:800:1:2001::724.30%AS9119
SOFTNET-AS
rate-limited: hop 3, hop 5, hop 6
4/4 24.5ms4/4 24.6ms71500(none)
hit2001:67c:be0::2
prb2001:67c:be0::1
AS197209

What was measured. From NL host (go6lab) we tested AS197209 (STN-EU-AS - STN STORITVE d.o.o.) using (external source) (2001:67c:be0::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 24.5/24.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a02:800:1:2001::7 in AS9119 (SOFTNET-AS). The path never entered the destination network (AS197209 STN-EU-AS). Responses kept coming through and including AS9119 SOFTNET-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS9119 SOFTNET-AS), not at it - AS9119 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as), hop 5 (20%, ASNone, NA), hop 6 (50%, AS9119, SOFTNET-AS) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS197209 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197209 details →

SLO host (6connect)open
Target: 2001:67c:be0::2 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46:0:1::91191.970%AS51988
ARNES-SIX
52a02:800:1:2001::70.90%AS9119
SOFTNET-AS
rate-limited: hop 4
4/4 2.4ms4/4 1.5ms51500(none)
hit2001:67c:be0::2
prb2001:67c:be0::1
AS197209

What was measured. From SLO host (6connect) we tested AS197209 (STN-EU-AS - STN STORITVE d.o.o.) using (external source) (2001:67c:be0::2). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.4/1.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a02:800:1:2001::7 in AS9119 (SOFTNET-AS). The path never entered the destination network (AS197209 STN-EU-AS). Responses kept coming through and including AS9119 SOFTNET-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS9119 SOFTNET-AS), not at it - AS9119 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 4 (70%, AS51988, ARNES-SIX) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS197209 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197209 details →

AS197441RETIP Informacijske StoritvePARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:7000:0:1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.20%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.40%AS50673
Serverius-as
42a03:3f40::10:412.40%AS50673
Serverius-as
5* * *---
6* * *---
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.60%AS174
COGENT-174
8* * *-60%-
9be5456.ccr81.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:48a6
23.50%AS174
COGENT-174
10be7244.agr62.vie01.atlas.cogentco.com
2001:550:0:1000::9a36:276e
23.00%AS174
COGENT-174
11be9461.rcr62.lju01.atlas.cogentco.com
2001:550:0:1000::9a36:48a2
29.70%AS174
COGENT-174
12be3191.nr61.b021176-0.lju01.atlas.cogentco.com
2001:550:0:1000::9a19:e7a
31.00%AS174
COGENT-174
132001:978:2:39::8:230.90%AS174
COGENT-174
142a02:d68:2:9::126.80%AS12778
SGN
15abak-gw.sgn.net
2a02:d68:c:1004::2
28.90%AS12778
SGN
rate-limited: hop 8
4/4 27.5ms4/4 59.1ms151500(none)
hit2a02:7000:0:1::1
hit2a02:7000::2
prb2a02:7000::1
AS197441

What was measured. From NL host (go6lab) we tested AS197441 (ABAK - RETIP Informacijske Storitve d.o.o.) using (external source) (2a02:7000:0:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 27.5/59.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 15 responsive hop(s). The deepest hop that returned a Time-Exceeded was abak-gw.sgn.net [2a02:d68:c:1004::2] in AS12778 (SGN). The path never entered the destination network (AS197441 ABAK). Responses kept coming through and including AS12778 SGN; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS12778 SGN), not at it - AS12778 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 8 (60%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS197441 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197441 details →

SLO host (6connect)open
Target: 2a02:7000:0:1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.70%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46::1:27782.40%AS51988
ARNES-SIX
52a02:d68:2:9::11.40%AS12778
SGN
6abak-gw.sgn.net
2a02:d68:c:1004::2
14.80%AS12778
SGN
4/4 27.5ms4/4 5.0ms61500(none)
hit2a02:7000:0:1::1
hit2a02:7000::2
prb2a02:7000::1
AS197441

What was measured. From SLO host (6connect) we tested AS197441 (ABAK - RETIP Informacijske Storitve d.o.o.) using (external source) (2a02:7000:0:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 27.5/5.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was abak-gw.sgn.net [2a02:d68:c:1004::2] in AS12778 (SGN). The path never entered the destination network (AS197441 ABAK). Responses kept coming through and including AS12778 SGN; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS12778 SGN), not at it - AS12778 did reply.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS197441 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197441 details →

AS197579BASSPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2a13:6b40:0:185::10 · ns3.bass.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.2-AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.110%AS50673
Serverius-as
42a03:3f40::10:335.60%AS50673
Serverius-as
52001:7f8:13::a500:3212:130.60%-
62a00:fc0:4320:3::a30.80%AS3212
TELEMACH
72a00:fc0:4320:3::b29.80%AS3212
TELEMACH
8* * *-0%-
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
3/4 30.1ms4/4 30.7ms71500(none)
drv2a13:6b40:0:185::10 ns3.bass.si
hit2a13:6b40:0:92::56
AS197579

What was measured. From NL host (go6lab) we tested AS197579 (BASS-SI - BASS d.o.o., Celje) using ns3.bass.si (2a13:6b40:0:185::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (3/4 small, 4/4 1500 B; avg RTT 30.1/30.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:fc0:4320:3::b in AS3212 (TELEMACH). The path never entered the destination network (AS197579 BASS-SI). Responses kept coming through and including AS3212 TELEMACH; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS3212 TELEMACH), not at it - AS3212 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS197579 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197579 details →

SLO host (6connect)open
Target: 2a13:6b40:0:185::10 · ns3.bass.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *---
4six.t-2.si
2001:7f8:46::3:4779
1.80%AS34779
T-2
52a01-260-1-1--35.core6.t-2.net
2a01:260:1:1::35
1.50%AS34779
T-2-AS
62a01-260-c021--2.link6.t-2.net
2a01:260:c021::2
2.60%AS34779
T-2-AS
7* * *-10%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 7
4/4 3.0ms4/4 3.1ms61500(none)
drv2a13:6b40:0:185::10 ns3.bass.si
hit2a13:6b40:0:92::56
AS197579

What was measured. From SLO host (6connect) we tested AS197579 (BASS-SI - BASS d.o.o., Celje) using ns3.bass.si (2a13:6b40:0:185::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.0/3.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-c021--2.link6.t-2.net [2a01:260:c021::2] in AS34779 (T-2-AS). The path never entered the destination network (AS197579 BASS-SI). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 7 (10%, AS197579, BASS-SI) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS197579 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS197579 details →

AS198524iLOLPIRFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2001:67c:2730:2::3 · ns2.ilol.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
3* * *---
4be1.core3.ams1.he.net
2001:470:e:5e::1
5.70%AS6939
HURRICANE
5be2.core4.fra1.he.net
2001:470:e:38::2
10.00%AS6939
HURRICANE
6be3.core2.fra2.he.net
2001:470:e:5a::1
10.810%AS6939
HURRICANE
7100ge0-0-0-3.core1.vie1.he.net
2001:470:0:7ef::2
22.00%AS6939
HURRICANE
8e0-36.core1.lju1.he.net
2001:470:0:578::2
25.30%AS6939
HURRICANE
9e0-36.core1.lju1.he.net
2001:470:0:578::2
25.10%AS6939
HURRICANE
102001:7f8:46::19:852424.60%AS51988
ARNES-SIX
112001:67c:2730:ff::ff26.50%AS198524
ILOL
12* * *-0%-
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 6
4/4 25.1ms4/4 25.3ms111500(none)
NS2001:67c:2730:2::3 ns2.ilol.si
MX2001:67c:2730:5::180 mail.ilol.si
SPF2001:67c:2730:2::4 git.ilol.si
SPF2001:67c:2730:2::2 posta.owca.info
atl2001:67c:2730:ee::2
… +5 more
2001:67c:2730:2::3 ns2.ilol.si NS
2001:67c:2730:5::180 mail.ilol.si MX
2001:67c:2730:2::4 git.ilol.si SPF
2001:67c:2730:2::2 posta.owca.info SPF
2001:67c:2730:ee::2 (external source) atl
2001:67c:2730:fe::2 (external source) atl
2001:67c:2730:1::1 (external source) hit
2001:67c:2730:ee::1 (external source) hit
2001:67c:2730:f9::1 (external source) hit
2001:67c:2730:fa::1 (external source) hit
AS198524

What was measured. From NL host (go6lab) we tested AS198524 (ILOL - iLOL d.o.o.) using ns2.ilol.si (2001:67c:2730:2::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 25.1/25.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 11 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:67c:2730:ff::ff in AS198524 (ILOL). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 6 (10%, AS6939, HURRICANE) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS198524 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS198524 details →

SLO host (6connect)open
Target: 2001:67c:2730:2::3 · ns2.ilol.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.10%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46::19:85241.70%AS51988
ARNES-SIX
52001:67c:2730:fa::21.40%AS198524
ILOL
62001:67c:2730:ff::ff1.30%AS198524
ILOL
7* * *-10%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 7
4/4 1.6ms4/4 1.5ms61500(none)
NS2001:67c:2730:2::3 ns2.ilol.si
MX2001:67c:2730:5::180 mail.ilol.si
SPF2001:67c:2730:2::4 git.ilol.si
SPF2001:67c:2730:2::2 posta.owca.info
atl2001:67c:2730:ee::2
… +5 more
2001:67c:2730:2::3 ns2.ilol.si NS
2001:67c:2730:5::180 mail.ilol.si MX
2001:67c:2730:2::4 git.ilol.si SPF
2001:67c:2730:2::2 posta.owca.info SPF
2001:67c:2730:ee::2 (external source) atl
2001:67c:2730:fe::2 (external source) atl
2001:67c:2730:1::1 (external source) hit
2001:67c:2730:ee::1 (external source) hit
2001:67c:2730:f9::1 (external source) hit
2001:67c:2730:fa::1 (external source) hit
AS198524

What was measured. From SLO host (6connect) we tested AS198524 (ILOL - iLOL d.o.o.) using ns2.ilol.si (2001:67c:2730:2::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.6/1.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (TLS handshake + forged PTB): partial - size moved from 2648 B to 2416 B (some shrinkage but not all the way to the 1280-byte MTU we requested).

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:67c:2730:ff::ff in AS198524 (ILOL). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 7 (10%, AS198524, ILOL) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS198524 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS198524 details →

AS198827Elektro GorenjskaPIRFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2001:67c:28f4:1::3 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2* * *---
32a00:1ca8:1::1942.410%AS50673
Serverius-as
42a03:3f40::10:335.00%AS50673
Serverius-as
52001:7f8:13::a500:3212:130.20%-
62a00:fc0:4330:1::a29.50%AS3212
TELEMACH
72a00:fc0:4330:1::b29.90%AS3212
TELEMACH
82001:67c:28f4:1::332.50%AS198827
ELEKTROGORENJSKA-SI
rate-limited: hop 3
4/4 36.0ms4/4 36.1ms8 ✓1500(none)
hit2001:67c:28f4:1::3
rtr2001:67c:28f4:1::2
AS198827

What was measured. From NL host (go6lab) we tested AS198827 (ELEKTROGORENJSKA-SI - Elektro Gorenjska, podjetje za distribucijo elektricne energije, d.d.) using (external source) (2001:67c:28f4:1::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 36.0/36.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:28f4:1::3 in AS198827 (ELEKTROGORENJSKA-SI). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS198827 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS198827 details →

SLO host (6connect)open
Target: 2001:67c:28f4:1::3 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.80%*AS8038
6CONNECT
2* * *---
3* * *---
42001:7f8:46::32122.330%AS51988
ARNES-SIX
52a00:fc0:3212:3::a3.50%AS3212
TELEMACH
62a00:fc0:3212:65::a3.20%AS3212
TELEMACH
72001:67c:28f4:1::38.80%AS198827
ELEKTROGORENJSKA-SI
rate-limited: hop 4
4/4 8.1ms4/4 9.4ms7 ✓1500(none)
hit2001:67c:28f4:1::3
rtr2001:67c:28f4:1::2
AS198827

What was measured. From SLO host (6connect) we tested AS198827 (ELEKTROGORENJSKA-SI - Elektro Gorenjska, podjetje za distribucijo elektricne energije, d.d.) using (external source) (2001:67c:28f4:1::3). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 8.1/9.4 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2001:67c:28f4:1::3 in AS198827 (ELEKTROGORENJSKA-SI). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 4 (30%, AS51988, ARNES-SIX) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS198827 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS198827 details →

AS199249GenisPIRPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:12bc::11 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.90%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:336.30%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
35.10%-
62a01-260-1-1--16.core6.t-2.net
2a01:260:1:1::16
41.90%AS34779
T-2-AS
72a01-260-1-1--5.core6.t-2.net
2a01:260:1:1::5
37.40%AS34779
T-2-AS
82a01-260-1027--2.link6.t-2.net
2a01:260:1027::2
41.70%AS34779
T-2-AS
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 39.1ms4/4 40.1ms81500(none)
hit2001:67c:12bc::11
prb2001:67c:12bc::1
AS199249

What was measured. From NL host (go6lab) we tested AS199249 (GENIS-SI - Genis d.o.o.) using (external source) (2001:67c:12bc::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 39.1/40.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-1027--2.link6.t-2.net [2a01:260:1027::2] in AS34779 (T-2-AS). The path never entered the destination network (AS199249 genis-si). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Likely problem: none. AS199249 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199249 details →

SLO host (6connect)open
Target: 2001:67c:12bc::11 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.40%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.710%AS5603
SIOL-NET
42a00:ee0:36f:1::27.40%AS5603
SIOL-NET
52a00:ee0:36f:1::23.50%AS5603
SIOL-NET
6* * *-0%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 2.8ms4/4 5.2ms51500(none)
hit2001:67c:12bc::11
prb2001:67c:12bc::1
AS199249

What was measured. From SLO host (6connect) we tested AS199249 (GENIS-SI - Genis d.o.o.) using (external source) (2001:67c:12bc::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.8/5.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee0:36f:1::2 in AS5603 (SIOL-NET). The path never entered the destination network (AS199249 genis-si). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS199249 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199249 details →

AS199268LANCOM inzeniring racunalniskig…PIRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:67c:1328:6::10 · lancom.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.10%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.30%AS50673
Serverius-as
42a03:3f40::10:413.60%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.10%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.50%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.90%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.80%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.70%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
27.10%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
26.90%AS5405
INTERDOTLINK
122a11:4142:2002::127.80%AS5405
INTERDOTLINK
13* * *---
14* * *---
15* * *---
16* * *-0%-
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 29.8ms4/4 29.9ms121500(none)
DMARC2001:67c:1328:6::10 lancom.si
AS199268

What was measured. From NL host (go6lab) we tested AS199268 (LANCOM-SI - LANCOM inzeniring racunalniskig sistemov d.o.o.) using lancom.si (2001:67c:1328:6::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.8/29.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a11:4142:2002::1 in AS5405 (INTERDOTLINK). The path never entered the destination network (AS199268 LANCOM-SI). Responses kept coming through and including AS5405 INTERDOTLINK; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5405 INTERDOTLINK), not at it - AS5405 did reply.

Likely problem: none. AS199268 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199268 details →

SLO host (6connect)open
Target: 2001:67c:1328:6::10 · lancom.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.680%AS5603
SIOL-NET
4* * *---
5* * *---
6* * *---
7* * *-0%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 4.6ms4/4 5.5ms31500(none)
DMARC2001:67c:1328:6::10 lancom.si
AS199268

What was measured. From SLO host (6connect) we tested AS199268 (LANCOM-SI - LANCOM inzeniring racunalniskig sistemov d.o.o.) using lancom.si (2001:67c:1328:6::10). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 4.6/5.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 3 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee1:800:9::1 in AS5603 (SIOL-NET). The path never entered the destination network (AS199268 LANCOM-SI). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (80%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS199268 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199268 details →

AS199971Ixtlan TeamPI/PARFC 4890 ✗RPKI -ASPA -NL host (go6lab)open
Target: 2001:67c:18e0::1 · ns1.ixtlan-team.si · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.40%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.50%AS50673
Serverius-as
42a03:3f40::10:412.50%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.50%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.60%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
25.90%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.50%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.10%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
26.70%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
26.30%AS5405
INTERDOTLINK
122a11:4142:2002::127.80%AS5405
INTERDOTLINK
13* * *-0%-
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 26.8ms4/4 27.1ms121500(none)
NS2001:67c:18e0::1 ns1.ixtlan-team.si
NS2001:67c:18e0:2::1 ns2.ixtlan-team.si
SPF2001:67c:18e0::245 smtp.ixtlan-team.si
hit2001:67c:18e0:2::47
hit2001:67c:18e0:2::8
… +4 more
2001:67c:18e0::1 ns1.ixtlan-team.si NS
2001:67c:18e0:2::1 ns2.ixtlan-team.si NS
2001:67c:18e0::245 smtp.ixtlan-team.si SPF
2001:67c:18e0:2::47 (external source) hit
2001:67c:18e0:2::8 (external source) hit
2001:67c:18e0::10 (external source) hit
2001:67c:18e0::17 (external source) hit
2001:67c:18e0::2 (external source) hit
2001:67c:18e0::25 (external source) hit
AS199971

What was measured. From NL host (go6lab) we tested AS199971 (SI-IXTLANTEAM - Ixtlan Team d.o.o.) using ns1.ixtlan-team.si (2001:67c:18e0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 26.8/27.1 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a11:4142:2002::1 in AS5405 (INTERDOTLINK). The path never entered the destination network (AS199971 SI-IXTLANTEAM). Responses kept coming through and including AS5405 INTERDOTLINK; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5405 INTERDOTLINK), not at it - AS5405 did reply.

Likely problem: none. AS199971 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199971 details →

SLO host (6connect)open
Target: 2001:67c:18e0::1 · ns1.ixtlan-team.si · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.780%AS5603
SIOL-NET
4* * *-10%-
5* * *---
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3, hop 4
4/4 1.6ms4/4 1.2ms31500(none)
NS2001:67c:18e0::1 ns1.ixtlan-team.si
NS2001:67c:18e0:2::1 ns2.ixtlan-team.si
SPF2001:67c:18e0::245 smtp.ixtlan-team.si
hit2001:67c:18e0:2::47
hit2001:67c:18e0:2::8
… +4 more
2001:67c:18e0::1 ns1.ixtlan-team.si NS
2001:67c:18e0:2::1 ns2.ixtlan-team.si NS
2001:67c:18e0::245 smtp.ixtlan-team.si SPF
2001:67c:18e0:2::47 (external source) hit
2001:67c:18e0:2::8 (external source) hit
2001:67c:18e0::10 (external source) hit
2001:67c:18e0::17 (external source) hit
2001:67c:18e0::2 (external source) hit
2001:67c:18e0::25 (external source) hit
AS199971

What was measured. From SLO host (6connect) we tested AS199971 (SI-IXTLANTEAM - Ixtlan Team d.o.o.) using ns1.ixtlan-team.si (2001:67c:18e0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.6/1.2 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1460 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 3 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee1:800:9::1 in AS5603 (SIOL-NET). The path never entered the destination network (AS199971 SI-IXTLANTEAM). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (80%, AS5603, SIOL-NET), hop 4 (10%, AS199971, SI-IXTLANTEAM) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS199971 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS199971 details →

AS200325BUNNYWAYPARFC 4890 ✓RPKI ✓ 33/33ASPA ✓NL host (go6lab)open
Target: 2400:52e0:1a00::1346:1 · support.bunnycdn.com · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.40%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1943.30%AS50673
Serverius-as
42a03:3f40::10:412.40%AS50673
Serverius-as
52001:978:2:40::3:14.380%AS174
COGENT-174
6* * *-60%-
7* * *---
8be3042.ccr21.ymq01.atlas.cogentco.com
2001:550:0:1000::9a36:2ca2
84.30%AS174
COGENT-174
9be3259.ccr31.yyz02.atlas.cogentco.com
2001:550:0:1000::9a36:29cd
93.70%AS174
COGENT-174
10port-channel2994.ccr92.cle04.atlas.cogentco.com
2001:550:0:1000::9a36:1fe9
96.50%AS174
COGENT-174
11be2718.ccr42.ord01.atlas.cogentco.com
2001:550:0:1000::9a36:781
102.640%AS174
COGENT-174
12be2124.rcr81.ord04.atlas.cogentco.com
2001:550:0:1000::9a36:528e
105.160%AS174
COGENT-174
13chi-cogent.cdn77.com
2001:550:2:4d::3a:2
98.40%AS174
COGENT-174
14vl221.chi-cs1-dist-1.cdn77.com
2a02:6ea0:1:6::1b
99.30%-
152400:52e0:1a00::1346:199.50%AS200325
BunnyCDN
rate-limited: hop 5, hop 6, hop 11, hop 12
4/4 98.7ms4/4 99.0ms15 ✓1500(none)
drv2400:52e0:1a00::1346:1 support.bunnycdn.com
hit2400:52e0:1500::1020:1
hit2400:52e0:1500::1021:1
hit2400:52e0:1500::1022:1
hit2400:52e0:1500::1030:1
… +4 more
2400:52e0:1a00::1346:1 support.bunnycdn.com drv
2400:52e0:1500::1020:1 (external source) hit
2400:52e0:1500::1021:1 (external source) hit
2400:52e0:1500::1022:1 (external source) hit
2400:52e0:1500::1030:1 (external source) hit
2400:52e0:1500::1031:1 (external source) hit
2400:52e0:1500::1091:1 (external source) hit
2400:52e0:1500::1092:1 (external source) hit
2400:52e0:1500::1093:1 (external source) hit
AS200325

What was measured. From NL host (go6lab) we tested AS200325 (BUNNYCDN - BUNNYWAY, informacijske storitve d.o.o.) using support.bunnycdn.com (2400:52e0:1a00::1346:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 98.7/99.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 15 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2400:52e0:1a00::1346:1 in AS200325 (BunnyCDN). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (80%, AS174, COGENT-174), hop 6 (60%, AS174, COGENT-174), hop 11 (40%, AS174, COGENT-174), hop 12 (60%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS200325 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS200325 details →

SLO host (6connect)open
Target: 2400:52e0:1a00::1346:1 · support.bunnycdn.com · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *-0%*-
3* * *-0%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
2.40%AS6939
HURRICANE
5100ge0-0-0-5.core1.vie1.he.net
2001:470:0:578::1
10.50%AS6939
HURRICANE
6100ge0-0-0-19.core2.fra2.he.net
2001:470:0:7ef::1
23.50%AS6939
HURRICANE
7be3.core4.fra1.he.net
2001:470:e:5a::2
19.00%AS6939
HURRICANE
8* * *-0%-
9ae-40.a02.frnkge13.de.bb.gin.ntt.net
2001:7f8::b62:0:1
18.50%-
10ae-16.r27.frnkge13.de.bb.gin.ntt.net
2001:728:0:2000::1fd
18.4-AS2914
NTT-DATA-2914
11ae-0.r23.parsfr04.fr.bb.gin.ntt.net
2001:728:0:2000::28e
25.6-AS2914
NTT-DATA-2914
12* * *---
13ae-8.r25.chcgil09.us.bb.gin.ntt.net
2001:418:0:2000::16e
124.6-AS2914
NTT-DATA-2914
14chi-b24-link.ip.twelve99.net
2001:2034:a:250::1
117.00%AS1299
TWELVE99
152001:418:0:5000::1dc5124.10%AS2914
NTT-DATA-2914
16* * *---
172400:52e0:1a00::1346:1116.20%AS200325
BunnyCDN
4/4 116.1ms4/4 116.9ms17 ✓1500(none)
drv2400:52e0:1a00::1346:1 support.bunnycdn.com
hit2400:52e0:1500::1020:1
hit2400:52e0:1500::1021:1
hit2400:52e0:1500::1022:1
hit2400:52e0:1500::1030:1
… +4 more
2400:52e0:1a00::1346:1 support.bunnycdn.com drv
2400:52e0:1500::1020:1 (external source) hit
2400:52e0:1500::1021:1 (external source) hit
2400:52e0:1500::1022:1 (external source) hit
2400:52e0:1500::1030:1 (external source) hit
2400:52e0:1500::1031:1 (external source) hit
2400:52e0:1500::1091:1 (external source) hit
2400:52e0:1500::1092:1 (external source) hit
2400:52e0:1500::1093:1 (external source) hit
AS200325

What was measured. From SLO host (6connect) we tested AS200325 (BUNNYCDN - BUNNYWAY, informacijske storitve d.o.o.) using support.bunnycdn.com (2400:52e0:1a00::1346:1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 116.1/116.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 17 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2400:52e0:1a00::1346:1 in AS200325 (BunnyCDN). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS200325 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS200325 details →

AS201395IT-TIMPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a0d:cec0::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2* * *---
32a00:1ca8:1::1942.510%AS50673
Serverius-as
42a03:3f40::10:336.80%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
34.30%-
62a01-260-1-1--25.core6.t-2.net
2a01:260:1:1::25
41.00%AS34779
T-2-AS
72a01-260-1-1--71.core6.t-2.net
2a01:260:1:1::71
39.00%AS34779
T-2-AS
82a01-260-8039--a.link6.t-2.net
2a01:260:8039::a
43.30%AS34779
T-2-AS
rate-limited: hop 3
4/4 43.4ms4/4 43.0ms81500(none)
prb2a0d:cec0::1
AS201395

What was measured. From NL host (go6lab) we tested AS201395 (IT-TIM-AS - IT-TIM d.o.o.) using (probe) (2a0d:cec0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 43.4/43.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-8039--a.link6.t-2.net [2a01:260:8039::a] in AS34779 (T-2-AS). The path never entered the destination network (AS201395 IT-TIM-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS201395 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201395 details →

SLO host (6connect)open
Target: 2a0d:cec0::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.00%*AS8038
6CONNECT
2* * *---
3* * *---
4six.a1.si
2001:7f8:46::2:1283
1.90%AS21283
A1 Slovenija
52001:15c0:2304:3::13.90%AS21283
A1SI-AS
62001:15c0:2304:3::425.00%AS21283
A1SI-AS
4/4 6.7ms4/4 3.9ms61500(none)
prb2a0d:cec0::1
AS201395

What was measured. From SLO host (6connect) we tested AS201395 (IT-TIM-AS - IT-TIM d.o.o.) using (probe) (2a0d:cec0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 6.7/3.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:15c0:2304:3::42 in AS21283 (A1SI-AS). The path never entered the destination network (AS201395 IT-TIM-AS). Responses kept coming through and including AS21283 A1SI-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS21283 A1SI-AS), not at it - AS21283 did reply.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS201395 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201395 details →

AS201522UB330.netPARPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a05:33c0:0:1::11 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.70%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.10%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.110%AS50673
Serverius-as
42a03:3f40::10:334.90%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
34.50%-
62a01-260-1-1--95.core6.t-2.net
2a01:260:1:1::95
36.80%AS34779
T-2-AS
72a01-260-4057--12.link6.t-2.net
2a01:260:4057::12
36.80%AS34779
T-2-AS
82a05:33c0::339.10%AS201522
UB330-net
9delphi.powercom.si
2a05:33c0:0:1::11
39.610%AS201522
UB330-net
rate-limited: hop 3, hop 9
4/4 38.7ms3/4 38.9ms9 ✓1500(none)
hit2a05:33c0:0:1::11
hit2a05:33c0:0:1::62
hit2a05:33c0:0:1::77
hit2a05:33c0::3
prb2a05:33c0::1
AS201522

What was measured. From NL host (go6lab) we tested AS201522 (UB330-NET - UB330.net d.o.o.) using (external source) (2a05:33c0:0:1::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 3/4 1500 B; avg RTT 38.7/38.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (3/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test attempted but no Echo Reply after PTB (probe 1500B); cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 9 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was delphi.powercom.si [2a05:33c0:0:1::11] in AS201522 (UB330-net). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as), hop 9 (10%, AS201522, UB330-net) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS201522 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201522 details →

SLO host (6connect)open
Target: 2a05:33c0:0:1::11 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::10.550%AS56635
XENYA
4six.t-2.si
2001:7f8:46::3:4779
1.10%AS34779
T-2
52a01-260-1-1--93.core6.t-2.net
2a01:260:1:1::93
1.60%AS34779
T-2-AS
62a01-260-4057--12.link6.t-2.net
2a01:260:4057::12
2.40%AS34779
T-2-AS
72a05:33c0::33.60%AS201522
UB330-net
8delphi.powercom.si
2a05:33c0:0:1::11
3.60%AS201522
UB330-net
rate-limited: hop 3
2/4 4.6ms4/4 4.6ms8 ✓1500(none)
hit2a05:33c0:0:1::11
hit2a05:33c0:0:1::62
hit2a05:33c0:0:1::77
hit2a05:33c0::3
prb2a05:33c0::1
AS201522

What was measured. From SLO host (6connect) we tested AS201522 (UB330-NET - UB330.net d.o.o.) using (external source) (2a05:33c0:0:1::11). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (2/4 small, 4/4 1500 B; avg RTT 4.6/4.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was delphi.powercom.si [2a05:33c0:0:1::11] in AS201522 (UB330-net). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (50%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS201522 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201522 details →

AS201905DspotRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a02:71e0::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.10%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1943.810%AS50673
Serverius-as
42a03:3f40::10:336.10%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
33.80%-
62a01-260-1-1--16.core6.t-2.net
2a01:260:1:1::16
42.00%AS34779
T-2-AS
72a01-260-1-1--9f.core6.t-2.net
2a01:260:1:1::9f
35.70%AS34779
T-2-AS
82a02:71e0::140.60%AS201905
DSPOT
rate-limited: hop 3
4/4 37.0ms4/4 37.3ms8 ✓1500(none)
prb2a02:71e0::1
AS201905

What was measured. From NL host (go6lab) we tested AS201905 (DSPOT - Dspot d.o.o.) using (probe) (2a02:71e0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 37.0/37.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:71e0::1 in AS201905 (DSPOT). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS201905 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201905 details →

SLO host (6connect)open
Target: 2a02:71e0::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *---
3* * *-40%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
2.30%AS6939
HURRICANE
5100ge0-0-0-5.core1.vie1.he.net
2001:470:0:578::1
9.90%AS6939
HURRICANE
62001:7f8:30:0:2:1:3:47799.00%-
72a01-260-1-1--6.core6.t-2.net
2a01:260:1:1::6
22.70%AS34779
T-2-AS
82a01-260-1-1--9f.core6.t-2.net
2a01:260:1:1::9f
9.40%AS34779
T-2-AS
92a02:71e0::111.00%AS201905
DSPOT
rate-limited: hop 3
4/4 7.2ms4/4 7.9ms9 ✓1500(none)
prb2a02:71e0::1
AS201905

What was measured. From SLO host (6connect) we tested AS201905 (DSPOT - Dspot d.o.o.) using (probe) (2a02:71e0::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 7.2/7.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:71e0::1 in AS201905 (DSPOT). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (40%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS201905 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS201905 details →

AS202988Žiga KraljRFC 4890 ✓RPKI -ASPA -NL host (go6lab)echo only
Target: 2a0f:85c1:e11::1 · static prefix probe · filter: destination AS202988 (ZIGA-KRALJ)
#IP / PTRRTTlossAS
12a00:8642:42::30.70%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.610%AS50673
Serverius-as
42a03:3f40::10:3310.80%AS50673
Serverius-as
52001:7f8:1:0:a500:13:7409:16.50%-
6e35.ams-nikhef-cr9.globalsecurelayer.com
2401:3cc0:10:50::1:1bc
14.90%AS7578
GSL
7e31.lon-thn-cr8.globalsecurelayer.com
2401:3cc0::4:48a
11.00%AS7578
GSL
8ebr1.ix1.inferno.net.uk
2a0f:85c0::1
10.80%AS207841
INFERNO
92a0f:85c2:7::38f11.90%AS207841
INFERNO
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
172a0f:85c1:e11::142.30%AS202988
ZIGA-KRALJ
rate-limited: hop 3
4/4 39.4ms0/4 -17 ✓1476destination AS202988 (ZIGA-KRALJ)
prb2a0f:85c1:e11::1
AS202988

What was measured. From NL host (go6lab) we tested AS202988 (ZIGA-KRALJ - Ziga Kralj) using (probe) (2a0f:85c1:e11::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (4/4 replies, avg 39.4 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1476) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2a0f:85c2:7::38f at hop 21 with announced MTU 1476. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 17 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0f:85c1:e11::1 in AS202988 (ZIGA-KRALJ). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: AS202988 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS202988 (ZIGA-KRALJ).

For more information click the ASN number on the far left or follow this direct link: AS202988 details →

SLO host (6connect)echo only
Target: 2a0f:85c1:e11::1 · static prefix probe · filter: destination AS202988 (ZIGA-KRALJ)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-10%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.90%AS6939
HURRICANE
5100ge0-0-0-5.core1.vie1.he.net
2001:470:0:578::1
7.30%AS6939
HURRICANE
6* * *---
7* * *-40%-
8be2.core4.lon2.he.net
2001:470:e:44::1
33.330%AS6939
HURRICANE
9be4.core2.lon3.he.net
2001:470:e:41::2
31.40%AS6939
HURRICANE
10* * *---
11lonap.lagrange.cloud
2001:7f8:17::3:3347:1
29.60%-
122a0f:85c2:7::38f29.70%AS207841
INFERNO
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
202a0f:85c1:e11::160.10%AS202988
ZIGA-KRALJ
rate-limited: hop 3, hop 7, hop 8
4/4 63.9ms0/4 -20 ✓1476destination AS202988 (ZIGA-KRALJ)
prb2a0f:85c1:e11::1
AS202988

What was measured. From SLO host (6connect) we tested AS202988 (ZIGA-KRALJ - Ziga Kralj) using (probe) (2a0f:85c1:e11::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (4/4 replies, avg 63.9 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1476) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2a0f:85c2:7::38f at hop 24 with announced MTU 1476. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 20 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a0f:85c1:e11::1 in AS202988 (ZIGA-KRALJ). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS56635, XENYA), hop 7 (40%, AS6939, HURRICANE), hop 8 (30%, AS6939, HURRICANE) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: AS202988 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS202988 (ZIGA-KRALJ).

For more information click the ASN number on the far left or follow this direct link: AS202988 details →

AS203466INTROSERVPARFC 4890 ✓RPKI ✓ 2/2ASPA -NL host (go6lab)open
Target: 2a06:f940:1::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.70%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
5.8-AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1944.70%AS50673
Serverius-as
42a03:3f40::10:414.50%AS50673
Serverius-as
5* * *-80%-
6be3457.ccr41.ams03.atlas.cogentco.com
2001:550:0:1000::8275:109
3.8-AS174
COGENT-174
7be3343.ccr41.fra05.atlas.cogentco.com
2001:550:0:1000::9a36:3e8d
11.70%AS174
COGENT-174
8be5485.rcr31.fra06.atlas.cogentco.com
2001:550:0:1000::9a36:4d36
12.50%AS174
COGENT-174
9be4167.nr21.b015759-0.fra06.atlas.cogentco.com
2001:550:0:1000::9a19:3b2
13.70%AS174
COGENT-174
102001:978:2:42::1d11.70%AS174
COGENT-174
11ae1-0.gw01.fra01.net.23m.com
2a00:f48:100:0:8000::32
10.80%AS47447
TTM
12v6.gw.de.introserv.net
2a06:f940:1::1
14.20%AS203466
INTROSERV
rate-limited: hop 5
4/4 10.4ms4/4 10.5ms12 ✓1500(none)
prb2a06:f940:1::1
AS203466

What was measured. From NL host (go6lab) we tested AS203466 (INTROSERV - INTROSERV d.o.o) using (probe) (2a06:f940:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 10.4/10.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 12 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was v6.gw.de.introserv.net [2a06:f940:1::1] in AS203466 (INTROSERV). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 5 (80%, AS174, COGENT-174) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS203466 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS203466 details →

SLO host (6connect)open
Target: 2a06:f940:1::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::10.6-AS56635
XENYA
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.90%AS6939
HURRICANE
5100ge0-0-0-5.core1.vie1.he.net
2001:470:0:578::1
8.40%AS6939
HURRICANE
6100ge0-0-0-19.core2.fra2.he.net
2001:470:0:7ef::1
19.30%AS6939
HURRICANE
72001:7f8:15e::8017.00%-
8ae3-0.bb01.fra01.net.23m.com
2a00:f48:100:0:8000::3d
16.70%AS47447
TTM
9ae2-0.gw01.fra01.net.23m.com
2a00:f48:100:0:8000::34
17.10%AS47447
TTM
10v6.gw.de.introserv.net
2a06:f940:1::1
16.80%AS203466
INTROSERV
4/4 16.8ms4/4 23.8ms10 ✓1500(none)
prb2a06:f940:1::1
AS203466

What was measured. From SLO host (6connect) we tested AS203466 (INTROSERV - INTROSERV d.o.o) using (probe) (2a06:f940:1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 16.8/23.8 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 10 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was v6.gw.de.introserv.net [2a06:f940:1::1] in AS203466 (INTROSERV). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was accepted (open) on tcp/443 and refused (RST) on tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS203466 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS203466 details →

AS203618UB330.netPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a03:8d60:0:e780::184 · ns1.ub330.net · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.60%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.20%AS50673
Serverius-as
42a03:3f40::10:335.60%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
34.00%-
62a01-260-1-1--95.core6.t-2.net
2a01:260:1:1::95
60.10%AS34779
T-2-AS
72a01-260-4057--16.link6.t-2.net
2a01:260:4057::16
44.60%AS34779
T-2-AS
8ns1.ub330.net
2a03:8d60:0:e780::184
41.50%AS203618
UB330-net2
4/4 40.5ms4/4 40.7ms8 ✓1500(none)
NS2a03:8d60:0:e780::184 ns1.ub330.net
atl2a03:8d60:0:e780:c24a:ff:fecc:9c0a
hit2a03:8d60:0:14b5::1
hit2a03:8d60:0:e780::1
hit2a03:8d60::1
AS203618

What was measured. From NL host (go6lab) we tested AS203618 (UB330-NET2 - UB330.net d.o.o.) using ns1.ub330.net (2a03:8d60:0:e780::184). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 40.5/40.7 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.ub330.net [2a03:8d60:0:e780::184] in AS203618 (UB330-net2). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS203618 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS203618 details →

SLO host (6connect)open
Target: 2a03:8d60:0:e780::184 · ns1.ub330.net · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.60%*AS8038
6CONNECT
2* * *-0%*-
3* * *-90%-
4six.t-2.si
2001:7f8:46::3:4779
1.20%AS34779
T-2
52a01-260-1-1--93.core6.t-2.net
2a01:260:1:1::93
1.70%AS34779
T-2-AS
62a01-260-4057--16.link6.t-2.net
2a01:260:4057::16
2.70%AS34779
T-2-AS
7ns1.ub330.net
2a03:8d60:0:e780::184
2.20%AS203618
UB330-net2
rate-limited: hop 3
4/4 2.3ms4/4 74.0ms7 ✓1500(none)
NS2a03:8d60:0:e780::184 ns1.ub330.net
atl2a03:8d60:0:e780:c24a:ff:fecc:9c0a
hit2a03:8d60:0:14b5::1
hit2a03:8d60:0:e780::1
hit2a03:8d60::1
AS203618

What was measured. From SLO host (6connect) we tested AS203618 (UB330-NET2 - UB330.net d.o.o.) using ns1.ub330.net (2a03:8d60:0:e780::184). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 2.3/74.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was ns1.ub330.net [2a03:8d60:0:e780::184] in AS203618 (UB330-net2). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS203618 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS203618 details →

AS204471KarsolinkPARFC 4890 ✓RPKI ✓ 2/2ASPA ✓NL host (go6lab)open
Target: 2a12:d8c0:105a:9001::a133 · one.karsolink.com · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::32.30%AS203993
STEFFANN-DC-AS
2* * *-0%*-
3speed-ix.fibertelecom.it
2001:7f8:b7::a504:1327:1
3.00%-
42a03:b020::22619.20%AS41327
FIBERTELECOM-AS
52a03:b020:1:51::b18.90%AS41327
FIBERTELECOM-AS
62a12:d8c0:101f:6::227.90%AS204471
KARSOLINK
72a12:d8c0:109f:121::a228.30%AS204471
KARSOLINK
8one.karsolink.com
2a12:d8c0:105a:9001::a133
28.60%*AS204471
KARSOLINK
4/4 29.3ms4/4 29.3ms8 ✓1500(none)
NS2a12:d8c0:105a:9001::a133 one.karsolink.com
NS2a12:d8c0:109a:9001::a133 two.karsolink.com
drv2a12:d8c0:105a:9001::2 ns1.karsolink.com
drv2a12:d8c0:109a:9001::2 ns2.karsolink.com
drv2a12:d8c0::6 radius.karsolink.com
… +1 more
2a12:d8c0:105a:9001::a133 one.karsolink.com NS
2a12:d8c0:109a:9001::a133 two.karsolink.com NS
2a12:d8c0:105a:9001::2 ns1.karsolink.com drv
2a12:d8c0:109a:9001::2 ns2.karsolink.com drv
2a12:d8c0::6 radius.karsolink.com drv
2a12:d8c0:105a:9001::1 vpn.karsolink.com drv
AS204471

What was measured. From NL host (go6lab) we tested AS204471 (KARSOLINK - 2S Computers SRL) using one.karsolink.com (2a12:d8c0:105a:9001::a133). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.3/29.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was one.karsolink.com [2a12:d8c0:105a:9001::a133] in AS204471 (KARSOLINK). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS204471 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS204471 details →

SLO host (6connect)open
Target: 2a12:d8c0:105a:9001::a133 · one.karsolink.com · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.20%*AS8038
6CONNECT
2* * *-0%*-
3* * *-0%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
2.20%AS6939
HURRICANE
5* * *---
6port-channel1.core1.zag2.he.net
2001:470:0:2ea::2
4.10%AS6939
HURRICANE
7* * *---
82scomputers-AS204471.mix-it.net
2001:7f8:b:100:1d1:a520:4471:213
10.40%-
92a12:d8c0:101f:6::219.60%AS204471
KARSOLINK
102a12:d8c0:109f:121::a218.30%AS204471
KARSOLINK
11one.karsolink.com
2a12:d8c0:105a:9001::a133
20.30%*AS204471
KARSOLINK
4/4 18.9ms4/4 18.9ms11 ✓1500(none)
NS2a12:d8c0:105a:9001::a133 one.karsolink.com
NS2a12:d8c0:109a:9001::a133 two.karsolink.com
drv2a12:d8c0:105a:9001::2 ns1.karsolink.com
drv2a12:d8c0:109a:9001::2 ns2.karsolink.com
drv2a12:d8c0::6 radius.karsolink.com
… +1 more
2a12:d8c0:105a:9001::a133 one.karsolink.com NS
2a12:d8c0:109a:9001::a133 two.karsolink.com NS
2a12:d8c0:105a:9001::2 ns1.karsolink.com drv
2a12:d8c0:109a:9001::2 ns2.karsolink.com drv
2a12:d8c0::6 radius.karsolink.com drv
2a12:d8c0:105a:9001::1 vpn.karsolink.com drv
AS204471

What was measured. From SLO host (6connect) we tested AS204471 (KARSOLINK - 2S Computers SRL) using one.karsolink.com (2a12:d8c0:105a:9001::a133). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 18.9/18.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 11 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was one.karsolink.com [2a12:d8c0:105a:9001::a133] in AS204471 (KARSOLINK). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS204471 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS204471 details →

AS205211Tilen BarbiricPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a0c:b641:4c0:: · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.50%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:333.50%AS50673
Serverius-as
5po15-h437c.core1-ams-ni.bb.as24961.net
2001:7f8:1::a502:4961:1
4.00%-
6lag15.core2-dus3.bb.wiit.network
2001:4ba0:ffe9:10::1
7.30%AS24961
MYLOC-AS
7lag2-h3679.edge3-dus3.bb.wiit.network
2001:4ba0:ffe9:7a::2
8.70%AS24961
MYLOC-AS
82001:4ba0:dead:b051::37.40%AS24961
MYLOC-AS
92a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net
2a0c:b640:ffff:100:120:7:128:134
7.70%AS34872
Servperso_Systems
10* * *-0%-
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 8.8ms4/4 8.3ms91500(none)
hit2a0c:b641:4c0::
rtr2a0c:b641:4c0:1::3
AS205211

What was measured. From NL host (go6lab) we tested AS205211 (TCLOUNET - Tilen Barbiric) using (external source) (2a0c:b641:4c0::). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 8.8/8.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net [2a0c:b640:ffff:100:120:7:128:134] in AS34872 (Servperso_Systems). The path never entered the destination network (AS205211 TCLOUNET). Responses kept coming through and including AS34872 Servperso_Systems; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34872 Servperso_Systems), not at it - AS34872 did reply.

Likely problem: none. AS205211 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS205211 details →

SLO host (6connect)open
Target: 2a0c:b641:4c0:: · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::11.80%AS5603
SIOL-NET
42a00:ee0:1:15::21.00%AS5603
SIOL-NET
52a11:4142:20021.00%-
6r2-vie1-at.as5405.net
2a11:4140::1e
13.00%AS5405
INTERDOTLINK
7r2-vie2-at.as5405.net
2a11:4140::20
13.10%AS5405
INTERDOTLINK
8r1-vie2-at.as5405.net
2a11:4140::1f
12.90%AS5405
INTERDOTLINK
9r1-muc1-de.as5405.net
2a11:4140::1c
12.70%AS5405
INTERDOTLINK
102001:7f8:44::151d:0:112.80%-
11muc.as34872-decix.servperso.net
2001:7f8:44::8838:0:1
21.30%-
122a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net
2a0c:b640:ffff:100:120:7:128:134
21.50%AS34872
Servperso_Systems
13* * *-0%-
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 21.6ms4/4 21.6ms121500(none)
hit2a0c:b641:4c0::
rtr2a0c:b641:4c0:1::3
AS205211

What was measured. From SLO host (6connect) we tested AS205211 (TCLOUNET - Tilen Barbiric) using (external source) (2a0c:b641:4c0::). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 21.6/21.6 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a0c-b640-ffff-100-120-7-128-134.edge.isp.servpersosystems.net [2a0c:b640:ffff:100:120:7:128:134] in AS34872 (Servperso_Systems). The path never entered the destination network (AS205211 TCLOUNET). Responses kept coming through and including AS34872 Servperso_Systems; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34872 Servperso_Systems), not at it - AS34872 did reply.

Likely problem: none. AS205211 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS205211 details →

AS210197ROK TAJZELPARFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2a13:f400::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::30.90%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.00%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.60%AS50673
Serverius-as
42a03:3f40::10:412.30%AS50673
Serverius-as
5* * *-0%-
6* * *-0%-
7* * *-0%-
82001:850:501:bc::223.30%AS8447
A1TELEKOM-AT
92001:15c0:1000:300::323.60%AS21283
A1SI-AS
102a13:f400::123.90%AS210197
RESITVE-AS
4/4 23.9ms4/4 23.9ms10 ✓1500(none)
prb2a13:f400::1
AS210197

What was measured. From NL host (go6lab) we tested AS210197 (RESITVE-AS - ROK TAJZEL) using (probe) (2a13:f400::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 23.9/23.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 10 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a13:f400::1 in AS210197 (RESITVE-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS210197 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS210197 details →

SLO host (6connect)open
Target: 2a13:f400::1 · static prefix probe · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::10.8-AS56635
XENYA
4six.a1.si
2001:7f8:46::2:1283
1.70%AS21283
A1 Slovenija
52001:15c0:1000:300::33.80%AS21283
A1SI-AS
62a13:f400::13.40%AS210197
RESITVE-AS
4/4 3.3ms4/4 3.3ms6 ✓1500(none)
prb2a13:f400::1
AS210197

What was measured. From SLO host (6connect) we tested AS210197 (RESITVE-AS - ROK TAJZEL) using (probe) (2a13:f400::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.3/3.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a13:f400::1 in AS210197 (RESITVE-AS). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS210197 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS210197 details →

AS210715Nik RozmanRPKI ⚠ 1/2ASPA ✓NL host (go6lab)echo only
Target: 2a0f:9400:7718:100:443::80 · media.piskot.si · filter: destination AS210715 (PISKOT-AS)
#IP / PTRRTTlossAS
12a00:8642:42::30.80%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
1.60%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:412.40%AS50673
Serverius-as
52a0c:9a40:1071::14.00%AS34927
iFog-GmbH
62a0c:9a40:1072::14.00%AS34927
iFog-GmbH
7null.ams.ifog.nl
2a0c:9a40:1070::18
3.80%AS34927
iFog-GmbH
8* * *---
9jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
41.10%AS210715
PISKOT-AS
10jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
1089.390%AS210715
PISKOT-AS
rate-limited: hop 10
0/4 -0/4 -101420destination AS210715 (PISKOT-AS)
drv2a0f:9400:7718:100:443::80 media.piskot.si
drv2a07:22c1:38:53::1 ns1.piskot.si
drv2a0f:9400:7718:53::1 ns2.piskot.si
atl2a0f:9400:7718:100:be24:11ff:feff:d54b
hit2a07:22c1:38:ffff::2
… +1 more
2a0f:9400:7718:100:443::80 media.piskot.si drv
2a07:22c1:38:53::1 ns1.piskot.si drv
2a0f:9400:7718:53::1 ns2.piskot.si drv
2a0f:9400:7718:100:be24:11ff:feff:d54b (external source) atl
2a07:22c1:38:ffff::2 (external source) hit
2a0f:9400:7718:100::1 (external source) hit
AS210715

What was measured. From NL host (go6lab) we tested AS210715 (PISKOT-AS - Nik Rozman) using media.piskot.si (2a0f:9400:7718:100:443::80). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. No Echo Reply was received for either size (small 0/4, 1500 B 0/4). ICMPv6 Echo to this address is fully suppressed.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. We have no Echo Reply from the target, but along the way tracepath received an ICMPv6 Type 2 (PMTU recorded as 1420), so PTB is at least partially making it back from the upstream segments. We cannot tell from outside whether the destination network itself accepts and honors inbound Type 2. A network that dropped Echo while keeping Type 2 (the RFC 4890 recommendation) would look identical to a fully-blocked one in this view - both leave us with no Echo Reply. To distinguish them we would need an active TCP/UDP flow to the destination plus a forged Type 2 in-flow. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 10 responsive hop(s). The deepest hop that returned a Time-Exceeded was jesenice.wg1.lju.gw.v6.piskot.si [2a07:22c1:38:ffff::2] in AS210715 (PISKOT-AS). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 10 (90%, AS210715, PISKOT-AS) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: AS210715 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS210715 (PISKOT-AS).

For more information click the ASN number on the far left or follow this direct link: AS210715 details →

SLO host (6connect)echo only
Target: 2a0f:9400:7718:100:443::80 · media.piskot.si · filter: destination AS210715 (PISKOT-AS)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
3* * *-30%-
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.90%AS6939
HURRICANE
5* * *---
6port-channel1.core1.zag2.he.net
2001:470:0:2ea::2
3.80%AS6939
HURRICANE
7* * *---
8be3.core2.mrs1.he.net
2001:470:0:2dd::2
23.610%AS6939
HURRICANE
9port-channel1.core1.bcn1.he.net
2001:470:0:5fb::1
25.40%AS6939
HURRICANE
102a0c:9a40:2b01::124.20%AS34927
iFog-GmbH
112a0c:9a40:100f:50b::232.00%-
122a0c:9a40:2b00::1831.80%AS34927
iFog-GmbH
13* * *---
14jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
58.80%AS210715
PISKOT-AS
15jesenice.wg1.lju.gw.v6.piskot.si
2a07:22c1:38:ffff::2
1154.870%AS210715
PISKOT-AS
rate-limited: hop 3, hop 8, hop 15
0/4 -0/4 -151420destination AS210715 (PISKOT-AS)
drv2a0f:9400:7718:100:443::80 media.piskot.si
drv2a07:22c1:38:53::1 ns1.piskot.si
drv2a0f:9400:7718:53::1 ns2.piskot.si
atl2a0f:9400:7718:100:be24:11ff:feff:d54b
hit2a07:22c1:38:ffff::2
… +1 more
2a0f:9400:7718:100:443::80 media.piskot.si drv
2a07:22c1:38:53::1 ns1.piskot.si drv
2a0f:9400:7718:53::1 ns2.piskot.si drv
2a0f:9400:7718:100:be24:11ff:feff:d54b (external source) atl
2a07:22c1:38:ffff::2 (external source) hit
2a0f:9400:7718:100::1 (external source) hit
AS210715

What was measured. From SLO host (6connect) we tested AS210715 (PISKOT-AS - Nik Rozman) using media.piskot.si (2a0f:9400:7718:100:443::80). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. No Echo Reply was received for either size (small 0/4, 1500 B 0/4). ICMPv6 Echo to this address is fully suppressed.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. We have no Echo Reply from the target, but along the way tracepath received an ICMPv6 Type 2 (PMTU recorded as 1420), so PTB is at least partially making it back from the upstream segments. We cannot tell from outside whether the destination network itself accepts and honors inbound Type 2. A network that dropped Echo while keeping Type 2 (the RFC 4890 recommendation) would look identical to a fully-blocked one in this view - both leave us with no Echo Reply. To distinguish them we would need an active TCP/UDP flow to the destination plus a forged Type 2 in-flow. Active test attempted but no Echo Reply to 1300-byte probe; cannot decide Type 2 acceptance from this run.

Path observations. Traceroute saw 15 responsive hop(s). The deepest hop that returned a Time-Exceeded was jesenice.wg1.lju.gw.v6.piskot.si [2a07:22c1:38:ffff::2] in AS210715 (PISKOT-AS). The path entered the destination AS - intermediate hops inside that AS replied - but every probed host inside its prefix was silent. The filter is at the destination AS edge (or applied to all hosts within).

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (30%, AS56635, XENYA), hop 8 (10%, AS6939, HURRICANE), hop 15 (70%, AS210715, PISKOT-AS) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: AS210715 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS210715 (PISKOT-AS).

For more information click the ASN number on the far left or follow this direct link: AS210715 details →

AS211256ELTA TELEKOMUNIKACIJEPARFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a02:64a1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.50%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.00%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.40%AS50673
Serverius-as
42a03:3f40::10:412.80%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
3.90%-
6r4-ams1-nl.as5405.net
2a11:4140::10
26.50%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.70%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
27.30%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
27.00%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
27.00%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
27.20%AS5405
INTERDOTLINK
122a11:4142:2002::126.80%AS5405
INTERDOTLINK
132a02:64a1::129.60%AS211256
ELTA-SI
4/4 29.0ms4/4 29.3ms13 ✓1500(none)
hit2a02:64a1::1
prb2a02:64a0::1
AS211256

What was measured. From NL host (go6lab) we tested AS211256 (ELTA-SI - ELTA TELEKOMUNIKACIJE d.o.o.) using (external source) (2a02:64a1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 29.0/29.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 13 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:64a1::1 in AS211256 (ELTA-SI). The path completed cleanly to the destination.

Other signals.

  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: none. AS211256 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS211256 details →

SLO host (6connect)open
Target: 2a02:64a1::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
1.00%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::12.090%AS5603
SIOL-NET
42a02:64a1::12.80%AS211256
ELTA-SI
rate-limited: hop 3
4/4 3.0ms4/4 3.0ms4 ✓1500(none)
hit2a02:64a1::1
prb2a02:64a0::1
AS211256

What was measured. From SLO host (6connect) we tested AS211256 (ELTA-SI - ELTA TELEKOMUNIKACIJE d.o.o.) using (external source) (2a02:64a1::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.0/3.0 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a02:64a1::1 in AS211256 (ELTA-SI). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (90%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS211256 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS211256 details →

AS212170Rok PotocnikRFC 4890 ✓RPKI ✓ 1/1ASPA -NL host (go6lab)open
Target: 2001:678:ba8:1000::53 · dns1.rula.net · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.50%AS203993
STEFFANN-DC-AS
2* * *-0%*-
32a00:1ca8:1::1948.120%AS50673
Serverius-as
42a03:3f40::10:336.10%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
33.80%-
62a01-260-1-1--38.core6.t-2.net
2a01:260:1:1::38
45.60%AS34779
T-2-AS
72a01-260-1-1--67.core6.t-2.net
2a01:260:1:1::67
41.60%AS34779
T-2-AS
82a01:260:1:1::10d38.60%AS34779
T-2-AS
92a01-260-c013--a.link6.t-2.net
2a01:260:c013::a
36.90%AS34779
T-2-AS
10* * *-0%-
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 39.2ms4/4 38.9ms91500(none)
NS2001:678:ba8:1000::53 dns1.rula.net
MX2001:678:ba8:1000::11 noname.rula.net
atl2001:678:ba8:1119::3
hit2001:678:ba8:1000::169
hit2001:678:ba8:1119::1
… +3 more
2001:678:ba8:1000::53 dns1.rula.net NS
2001:678:ba8:1000::11 noname.rula.net MX
2001:678:ba8:1119::3 (external source) atl
2001:678:ba8:1000::169 (external source) hit
2001:678:ba8:1119::1 (external source) hit
2001:678:ba8:1119::2 (external source) hit
2001:678:ba8:2001:dda:2a05:9d40:dd13 (external source) hit
2001:678:ba8:f::2 (external source) hit
AS212170

What was measured. From NL host (go6lab) we tested AS212170 (RULA-AS - Rok Potocnik, s.p.) using dns1.rula.net (2001:678:ba8:1000::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 39.2/38.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-c013--a.link6.t-2.net [2a01:260:c013::a] in AS34779 (T-2-AS). The path never entered the destination network (AS212170 RULA-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS212170 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS212170 details →

SLO host (6connect)open
Target: 2001:678:ba8:1000::53 · dns1.rula.net · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2ccr-to-fw-ccr1-gw-lju.6connect.com
2607:fae0:a000:2::2
0.6-AS8038
6CONNECT
32a03:a100:0:201:1::10.520%AS56635
XENYA
4six.t-2.si
2001:7f8:46::3:4779
1.10%AS34779
T-2
52a01-260-1-1--84.core6.t-2.net
2a01:260:1:1::84
2.60%AS34779
T-2-AS
62a01:260:1:1::10d2.60%AS34779
T-2-AS
72a01-260-c013--a.link6.t-2.net
2a01:260:c013::a
3.80%AS34779
T-2-AS
8* * *-0%-
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 3.7ms4/4 4.5ms71500(none)
NS2001:678:ba8:1000::53 dns1.rula.net
MX2001:678:ba8:1000::11 noname.rula.net
atl2001:678:ba8:1119::3
hit2001:678:ba8:1000::169
hit2001:678:ba8:1119::1
… +3 more
2001:678:ba8:1000::53 dns1.rula.net NS
2001:678:ba8:1000::11 noname.rula.net MX
2001:678:ba8:1119::3 (external source) atl
2001:678:ba8:1000::169 (external source) hit
2001:678:ba8:1119::1 (external source) hit
2001:678:ba8:1119::2 (external source) hit
2001:678:ba8:2001:dda:2a05:9d40:dd13 (external source) hit
2001:678:ba8:f::2 (external source) hit
AS212170

What was measured. From SLO host (6connect) we tested AS212170 (RULA-AS - Rok Potocnik, s.p.) using dns1.rula.net (2001:678:ba8:1000::53). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 3.7/4.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 7 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-c013--a.link6.t-2.net [2a01:260:c013::a] in AS34779 (T-2-AS). The path never entered the destination network (AS212170 RULA-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS212170 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS212170 details →

AS212405Kristjan KomlosiRFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2a07:22c1:31::4 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.00%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.6-AS203993
STEFFANN-DC-AS
32a0c:9a40:1071::13.60%AS34927
iFog-GmbH
42a0c:9a40:1001::110.90%AS34927
iFog-GmbH
5* * *-0%-
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 10.7ms4/4 10.9ms41500(none)
hit2a07:22c1:31::4
prb2a07:22c1:31::1
AS212405

What was measured. From NL host (go6lab) we tested AS212405 (KRISTJAN-KOMLOSI - Kristjan Komlosi) using (external source) (2a07:22c1:31::4). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 10.7/10.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 4 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a0c:9a40:1001::1 in AS34927 (iFog-GmbH). The path never entered the destination network (AS212405 Kristjan-Komlosi). Responses kept coming through and including AS34927 iFog-GmbH; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34927 iFog-GmbH), not at it - AS34927 did reply.

Likely problem: none. AS212405 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS212405 details →

SLO host (6connect)open
Target: 2a07:22c1:31::4 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a00:ee1:800:9::12.140%AS5603
SIOL-NET
42a00:ee0:1:15::21.00%AS5603
SIOL-NET
52a0c:9a40:1001::134.010%AS34927
iFog-GmbH
6* * *-10%-
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3, hop 5, hop 6
4/4 37.4ms4/4 35.9ms51500(none)
hit2a07:22c1:31::4
prb2a07:22c1:31::1
AS212405

What was measured. From SLO host (6connect) we tested AS212405 (KRISTJAN-KOMLOSI - Kristjan Komlosi) using (external source) (2a07:22c1:31::4). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 37.4/35.9 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 5 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a0c:9a40:1001::1 in AS34927 (iFog-GmbH). The path never entered the destination network (AS212405 Kristjan-Komlosi). Responses kept coming through and including AS34927 iFog-GmbH; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34927 iFog-GmbH), not at it - AS34927 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (40%, AS5603, SIOL-NET), hop 5 (10%, AS34927, iFog-GmbH), hop 6 (10%, AS212405, Kristjan-Komlosi) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS212405 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS212405 details →

AS213115MMITECHPIRFC 4890 ✓RPKI -ASPA -NL host (go6lab)open
Target: 2001:67c:2474::3586:3761 · (SPF ip6: literal) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.30%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.30%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.60%AS50673
Serverius-as
42a03:3f40::10:335.40%AS50673
Serverius-as
5t-2.interxionfra11.nlsix.net
2001:7f8:13::a503:4779:1
33.90%-
62a01-260-1-1--16.core6.t-2.net
2a01:260:1:1::16
42.50%AS34779
T-2-AS
72a01-260-1-1--9f.core6.t-2.net
2a01:260:1:1::9f
35.60%AS34779
T-2-AS
82a01-260-1021--a.link6.t-2.net
2a01:260:1021::a
33.90%AS34779
T-2-AS
9* * *-0%-
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 33.2ms4/4 33.3ms81500(none)
SPF2001:67c:2474::3586:3761
SPF2001:67c:2474::5db9:24c2
SPF2001:67c:2474::b474:1c43
drv2001:67c:2474::6627:478b ns1.mmitech.si
drv2001:67c:2474::7a41:9792 ns2.mmitech.si
… +3 more
2001:67c:2474::3586:3761 (SPF ip6: literal) SPF
2001:67c:2474::5db9:24c2 (SPF ip6: literal) SPF
2001:67c:2474::b474:1c43 (SPF ip6: literal) SPF
2001:67c:2474::6627:478b ns1.mmitech.si drv
2001:67c:2474::7a41:9792 ns2.mmitech.si drv
2001:67c:2474::1 (external source) hit
2001:67c:2474::69fe:b543 (external source) hit
2001:67c:2474::a536:1a31 (external source) hit
AS213115

What was measured. From NL host (go6lab) we tested AS213115 (MMITECH-AS - MMITECH d.o.o.) using (SPF ip6: literal) (2001:67c:2474::3586:3761). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 33.2/33.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 8 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a01-260-1021--a.link6.t-2.net [2a01:260:1021::a] in AS34779 (T-2-AS). The path never entered the destination network (AS213115 MMITECH-AS). Responses kept coming through and including AS34779 T-2-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS34779 T-2-AS), not at it - AS34779 did reply.

Other signals.

  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS213115 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS213115 details →

SLO host (6connect)open
Target: 2001:67c:2474::3586:3761 · (SPF ip6: literal) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::10.720%AS56635
XENYA
4six.a1.si
2001:7f8:46::2:1283
1.00%AS21283
A1 Slovenija
52001:15c7:a000:b::11.50%AS21283
A1SI-AS
62001:15c7:a000:b::22.10%AS21283
A1SI-AS
7* * *-0%-
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 77.6ms4/4 2.3ms61500(none)
SPF2001:67c:2474::3586:3761
SPF2001:67c:2474::5db9:24c2
SPF2001:67c:2474::b474:1c43
drv2001:67c:2474::6627:478b ns1.mmitech.si
drv2001:67c:2474::7a41:9792 ns2.mmitech.si
… +3 more
2001:67c:2474::3586:3761 (SPF ip6: literal) SPF
2001:67c:2474::5db9:24c2 (SPF ip6: literal) SPF
2001:67c:2474::b474:1c43 (SPF ip6: literal) SPF
2001:67c:2474::6627:478b ns1.mmitech.si drv
2001:67c:2474::7a41:9792 ns2.mmitech.si drv
2001:67c:2474::1 (external source) hit
2001:67c:2474::69fe:b543 (external source) hit
2001:67c:2474::a536:1a31 (external source) hit
AS213115

What was measured. From SLO host (6connect) we tested AS213115 (MMITECH-AS - MMITECH d.o.o.) using (SPF ip6: literal) (2001:67c:2474::3586:3761). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 77.6/2.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 6 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2001:15c7:a000:b::2 in AS21283 (A1SI-AS). The path never entered the destination network (AS213115 MMITECH-AS). Responses kept coming through and including AS21283 A1SI-AS; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS21283 A1SI-AS), not at it - AS21283 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • TCP SYN was accepted (open) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: none. AS213115 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS213115 details →

AS214499BASSPI/PARFC 4890 ✓RPKI ✓ 1/1ASPA ✓NL host (go6lab)open
Target: 2001:67c:21f4:212::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
12a00:8642:42::31.80%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.00%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.70%AS50673
Serverius-as
42a03:3f40::10:418.60%AS50673
Serverius-as
5speed-ix.inter.link
2001:7f8:b7::a500:5405:1
4.80%-
6r4-ams1-nl.as5405.net
2a11:4140::10
27.10%AS5405
INTERDOTLINK
7r6-ams1-nl.as5405.net
2a11:4140::54
26.50%AS5405
INTERDOTLINK
8r4-fra3-de.as5405.net
2a11:4140::37
26.20%AS5405
INTERDOTLINK
9r2-vie2-at.as5405.net
2a11:4140::20
26.90%AS5405
INTERDOTLINK
10r2-vie1-at.as5405.net
2a11:4140::1e
27.10%AS5405
INTERDOTLINK
11r1-lju1-si.as5405.net
2a11:4140::38
26.90%AS5405
INTERDOTLINK
122a11:4142:2002::126.40%AS5405
INTERDOTLINK
13* * *-0%-
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
4/4 27.2ms4/4 27.5ms121500(none)
hit2001:67c:21f4:212::1
AS214499

What was measured. From NL host (go6lab) we tested AS214499 (BASS-2 - BASS d.o.o., Celje) using (external source) (2001:67c:21f4:212::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 27.2/27.5 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 12 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a11:4142:2002::1 in AS5405 (INTERDOTLINK). The path never entered the destination network (AS214499 BASS-2). Responses kept coming through and including AS5405 INTERDOTLINK; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5405 INTERDOTLINK), not at it - AS5405 did reply.

Likely problem: none. AS214499 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS214499 details →

SLO host (6connect)open
Target: 2001:67c:21f4:212::1 · via IPv6 Hitlist (responsive) · filter: (none)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.30%*AS8038
6CONNECT
2* * *-0%*-
32a00:ee1:800:9::12.270%AS5603
SIOL-NET
4* * *-0%-
5* * *---
6* * *---
7* * *---
8* * *---
9* * *---
10* * *---
11* * *---
12* * *---
13* * *---
14* * *---
15* * *---
16* * *---
17* * *---
18* * *---
19* * *---
20* * *---
21* * *---
22* * *---
23* * *---
24* * *---
rate-limited: hop 3
4/4 1.1ms4/4 1.3ms31500(none)
hit2001:67c:21f4:212::1
AS214499

What was measured. From SLO host (6connect) we tested AS214499 (BASS-2 - BASS d.o.o., Celje) using (external source) (2001:67c:21f4:212::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Both small and 1500-byte Echo Requests received replies (4/4 small, 4/4 1500 B; avg RTT 1.1/1.3 ms). Inbound ICMPv6 Echo Reply is permitted and the path can carry full-MTU packets without needing a Packet-Too-Big signal - consistent with a properly open ICMPv6 stance.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path-MTU is 1500 end-to-end (4/4 1500-byte echoes pass), so no router needed to emit a Packet-Too-Big on this run - we cannot directly confirm Type 2 handling, but nothing on the path required it. Type 2 acceptance by the destination would only be exercised over a smaller-MTU path. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 3 responsive hop(s). The deepest hop that returned a Time-Exceeded was 2a00:ee1:800:9::1 in AS5603 (SIOL-NET). The path never entered the destination network (AS214499 BASS-2). Responses kept coming through and including AS5603 SIOL-NET; after that hop the next routers stopped returning ICMPv6 Time-Exceeded (either filtering it themselves, or the responses are being dropped on the way back). Be careful: the silence starts past (AS5603 SIOL-NET), not at it - AS5603 did reply.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (70%, AS5603, SIOL-NET) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.

Likely problem: none. AS214499 accepts ICMPv6 Echo and the path between us is fully usable for Echo and 1500-byte traffic.

For more information click the ASN number on the far left or follow this direct link: AS214499 details →

AS215844Primoz PokerznikRFC 4890 ✗RPKI ✓ 2/2ASPA -NL host (go6lab)echo only
Target: 2a06:9801:215::1 · static prefix probe · filter: destination AS215844 (xcs3com)
#IP / PTRRTTlossAS
12a00:8642:42::31.10%AS203993
STEFFANN-DC-AS
2gw.friends.steffann.nl
2a00:8642:1000:f000::1
2.20%*AS203993
STEFFANN-DC-AS
32a00:1ca8:1::1942.220%AS50673
Serverius-as
42a03:3f40::10:412.10%AS50673
Serverius-as
52a0c:9a40:1071::13.70%AS34927
iFog-GmbH
62a0c:9a40:1001::111.70%AS34927
iFog-GmbH
72a0c:9a40:1034::1010.50%AS34927
iFog-GmbH
82a06:9801:215::120.30%AS215844
xcs3com
rate-limited: hop 3
4/4 17.9ms0/4 -8 ✓1450destination AS215844 (xcs3com)
prb2a06:9801:215::1
AS215844

What was measured. From NL host (go6lab) we tested AS215844 (XCS3COM - Primoz Pokerznik) using (probe) (2a06:9801:215::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (4/4 replies, avg 17.9 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1450) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2a0c:9a40:1034::10 at hop 12 with announced MTU 1450. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test (ICMPv6 Echo + forged PTB): the next 1500-byte Echo Reply still arrived whole (1360 B, no Fragment Header) after our forged Type 2 - Type 2 was not honored (either filtered en route, the destination ignored / failed to validate our PTB, or its PMTU cache key didn't match the test flow). PMTUD does not work toward this address from us.

Path observations. Traceroute saw 8 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a06:9801:215::1 in AS215844 (xcs3com). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (20%, AS50673, Serverius-as) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.

Likely problem: AS215844 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS215844 (xcs3com).

For more information click the ASN number on the far left or follow this direct link: AS215844 details →

SLO host (6connect)echo only
Target: 2a06:9801:215::1 · static prefix probe · filter: destination AS215844 (xcs3com)
#IP / PTRRTTlossAS
1fw1-lju.6connect.com
2607:fae0:a000::2
0.40%*AS8038
6CONNECT
2* * *---
32a03:a100:0:201:1::10.710%AS56635
XENYA
4e0-1.core1.lju1.he.net
2001:470:1:5be::1
1.80%AS6939
HURRICANE
5100ge0-0-0-5.core1.vie1.he.net
2001:470:0:578::1
7.10%AS6939
HURRICANE
6100ge0-0-0-19.core2.fra2.he.net
2001:470:0:7ef::1
19.10%AS6939
HURRICANE
7* * *---
8as209533.dwh.kleyrex.net
2001:7f8:33::a120:9533:1
18.90%-
92a06:9801:215::131.60%AS215844
xcs3com
rate-limited: hop 3
4/4 56.5ms0/4 -9 ✓1450destination AS215844 (xcs3com)
prb2a06:9801:215::1
AS215844

What was measured. From SLO host (6connect) we tested AS215844 (XCS3COM - Primoz Pokerznik) using (probe) (2a06:9801:215::1). Probes: small ICMPv6 Echo (56-byte payload), 1500-byte Echo with DF set, a 24-hop traceroute6, an mtr cycle (10×1s) for per-hop loss, tracepath -6 for path-MTU, a UDP probe to a high closed port, and TCP SYN to ports 443 and 80.

Echo behavior. Small echo works (4/4 replies, avg 56.5 ms), but every 1500-byte Echo Request was lost (0/4). Some link on the path has an MTU below 1500 and the required ICMPv6 Type 2 (Packet Too Big) message is not getting back to us - that is a classic broken-PMTUD signature, frequently caused by a firewall on the destination side that drops ICMPv6 Type 2 along with Echo.

ICMPv6 Type 2 (Packet Too Big) / PMTUD. Path PMTU is below 1500 (MTU=1450) but PMTUD is actually functional. Per-hop diagnostic: a 1500-byte Echo Request elicited an ICMPv6 Packet-Too-Big from 2001:7f8:33::a120:9533:1 at hop 13 with announced MTU 1450. That router is generating Type 2 and it reaches us, so PMTUD on this path works. The 1500-byte Echo failure here is a measurement artifact: once our local kernel caches the lower PMTU, ping6 -M do refuses to send 1500-byte packets at all and reports failure. Real TCP / UDP traffic toward this destination would just use the smaller MTU and work normally. Active test (ICMPv6 Echo + forged PTB): we forged an ICMPv6 Type 2 (MTU=1280) toward this destination - the destination then split its 1500-byte Echo Reply into 2 fragments via the IPv6 Fragment Header. Type 2 is accepted and honored by this destination's stack.

Path observations. Traceroute saw 9 responsive hop(s) and reached the target itself. The deepest hop that returned a Time-Exceeded was 2a06:9801:215::1 in AS215844 (xcs3com). The path completed cleanly to the destination.

Other signals.

  • Per-hop loss between 5% and 95% on hop 3 (10%, AS56635, XENYA) - that router replies sometimes but not always, which is characteristic of ICMPv6 rate-limiting, not an outright filter.
  • A UDP probe to a closed high port elicited an ICMPv6 Type 1 (Destination Unreachable) response - the destination is alive and its host firewall returns Type 1 normally.
  • TCP SYN was refused (RST) on tcp/443, tcp/80 - the host is reachable on TCP, so any ICMPv6 silence above is firewalling, not the host being down.

Likely problem: AS215844 (or a router on the path) drops ICMPv6 Type 2 / oversize traffic; PMTUD will misbehave for hosts that try to send large packets to this destination. Filter is most likely at destination AS215844 (xcs3com).

For more information click the ASN number on the far left or follow this direct link: AS215844 details →

NL host (go6lab) - 61 ASNs measured

55
  Echo + 1500B OK
3
  Echo OK, 1500B fails
0
  1500B OK, echo fails
1
  ICMP blocked, TCP alive
2
  All blocked, target is alive
0
  Path reaches AS, hosts found but silent
0
  Announced, no IPv6 host found
0
  Path never reaches AS

ITA host (Karsolink) - 61 ASNs measured

55
  Echo + 1500B OK
3
  Echo OK, 1500B fails
0
  1500B OK, echo fails
1
  ICMP blocked, TCP alive
2
  All blocked, target is alive
0
  Path reaches AS, hosts found but silent
0
  Announced, no IPv6 host found
0
  Path never reaches AS

SLO host (6connect) - 61 ASNs measured

57
  Echo + 1500B OK
3
  Echo OK, 1500B fails
0
  1500B OK, echo fails
1
  ICMP blocked, TCP alive
0
  All blocked, target is alive
0
  Path reaches AS, hosts found but silent
0
  Announced, no IPv6 host found
0
  Path never reaches AS

Weekly-probe schedule (17 ASes)

These ASes have produced the same stably-unreachable / no-host result for 14+ consecutive daily runs and have been moved to a 6-day probe cycle (set by scripts/19_update_skip_list.py) to conserve probe budget against networks whose status doesn't change. Each row carries the last-recorded classification and the date of the next scheduled probe. Click an AS to see its skip-status detail page.

ASNHolderLast classificationStreakNext probe
AS6764PERFTECH-SLOVENIA-AS PERFTECH, podjetje za proizvodnjo in uvajanje novih tehnologij, d.o.o.transit only unreachable18 runs2026-06-04
AS16104SKB-AS SKB banka d.d., Ljubljanatransit only unreachable18 runs2026-06-04
AS41104PODRAVKA-AS PODRAVKA trgovsko podjetje, d.o.o. Ljubljanatransit only unreachable18 runs2026-06-04
AS51143Informatika Informatika d.o.o.transit only unreachable18 runs2026-06-04
AS51509NEO-AS NEO IT d.o.o.transit only unreachable18 runs2026-06-04
AS56513OPTISIS-AS Optisis d.o.o.transit only unreachable18 runs2026-06-04
AS56993KZPS KONTROLA ZRACNEGA PROMETA SLOVENIJE, d.o.o.transit only unreachable18 runs2026-06-04
AS57517POLICIJA-AS Ministrstvo za notranje zadevetransit only unreachable18 runs2026-06-04
AS57532KTVRavne Kabelska televizija Ravne d.o.o.transit only unreachable18 runs2026-06-04
AS59449Mitja Mitja Herbajtransit only unreachable18 runs2026-06-04
AS60114SIEL-AnyCast SIEL, d.o.o.transit only unreachable18 runs2026-06-04
AS60973ZUPO ZUPO D.O.O.transit only unreachable18 runs2026-06-04
AS64465COMTRON-AS Comtron d.o.o.transit only unreachable18 runs2026-06-04
AS199612BISNODE Dun & Bradstreet d.o.o.transit only unreachable18 runs2026-06-04
AS202456SILIKO SILIKO PROIZVODNO PODJETJE, STORITVE IN TRGOVINA, D.O.O.transit only unreachable18 runs2026-06-04
AS212548PETROL-AS Petrol d.d. Ljubljanatransit only unreachable18 runs2026-06-04
AS215472SL-JFERME Jan Fermetransit only unreachable18 runs2026-06-04

Generated by the multi-country measurement pipeline; per-vantage probes from 3 vantages. Raw data: data.json.