今天拨vpn不通,ping了一下地址,结果出现这么个ping的错误,还是第一回见到,记录一下:
PING时出现TTL expired in transit提示。
E:/01.公共区域>ping 116.215.244.30
Pinging 116.215.244.30 with 32 bytes of data:
Reply from 221.133.226.246: TTL expired in transi
Reply from 221.133.226.246: TTL expired in transi
Reply from 221.133.226.246: TTL expired in transi
Reply from 221.133.226.246: TTL expired in transi
Ping statistics for 116.215.244.30:
Packets: Sent = 4, Received = 4, Lost = 0 (0%
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
网上搜索了一下,下面这个解释的不错:
经过分析,发现有两种原因。
一、产生环路,导致TTL耗尽
Microsoft Windows XP [版本 5.1.2600]
(C) 版权所有 1985-2001 Microsoft Corp.
C:/>tracert 172.20.132.12
Tracing route to 172.20.132.12 over a maximum of 30 hops
1 * * * Request timed out.
2 1 ms <1 ms <1 ms 172.20.212.3
3 13 ms 13 ms 13 ms 192.168.2.17
4 15 ms 15 ms 15 ms 172.20.129.254
5 17 ms 15 ms 15 ms 172.20.129.253
6 21 ms 20 ms 19 ms 172.20.129.254
7 22 ms 20 ms 19 ms 172.20.129.253
8 26 ms 23 ms 23 ms 172.20.129.254
^C
跟踪路由后发现在172.20.129.253和172.20.129.254之间数据来回转发,导致TTL耗尽。
二、ARP病毒造成的
ARP病毒产生ARP数据包,导致一个网段部分接受了数据包的终端无法到达正确的网关。
可以做如下实验:记下正确的网关MAC,用anti arp sniffer软件监控,发现病毒机器后立即进行隔离。