Trace routing path

Trace routing path

[Leroy Tennison]
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Re: Trace routing path

[Anton Danilov]

Hello.
You can resolve the actual routes with 'ip route get' command.
Something like this: ip -d route get <dst> from <src> iif
<input-interface>. It will show the table number if table is not main.
ip route get command also supports the filrewall mark specifing (ip -d
route get <dst> fwmark <mark-value>).

On Wed, 27 Feb 2019 at 05:06, Leroy Tennison <leroy@datavoiceint.com> wrote:
>
> iptables has the TRACE functionality to trace through netfilter's path of execution for a specified ruleset, is there a trace functionality for routing?  Something which would show if an alternate routing table handled the routing rather than main?
>
>
> Leroy Tennison
> Network Information/Cyber Security Specialist
> E: leroy@datavoiceint.com
> 2220 Bush Dr
> McKinney, Texas
> 75070
> www.datavoiceint.com
> This message has been sent on behalf
> of a company that is part of the Harris Operating Group of
> Constellation Software Inc. These companies are listed
> here
> .
> If you prefer not to be contacted by Harris
> Operating Group
> please notify us
> .
> This message is intended exclusively for the
> individual or entity to which it is addressed. This communication
> may contain information that is proprietary, privileged or
> confidential or otherwise legally exempt from disclosure. If you are
> not the named addressee, you are not authorized to read, print,
> retain, copy or disseminate this message or any part of it. If you
> have received this message in error, please notify the sender
> immediately by e-mail and delete all copies of the
> message.
>


-- 
Anton.

Re: Trace routing path

[Grant Taylor]

[-- Attachment #1: Type: text/plain, Size: 603 bytes --]

On 02/27/2019 05:45 AM, Anton Danilov wrote:
> Hello.

Hi,

> You can resolve the actual routes with 'ip route get' command.
> Something like this: ip -d route get <dst> from <src> iif
> <input-interface>. It will show the table number if table is not main.

It will also honor names in /etc/iproute2/rt_tables

> ip route get command also supports the filrewall mark specifing (ip -d
> route get <dst> fwmark <mark-value>).

ip also supports realms which might help with troubleshooting.

I'm not aware of anything for ip like iptables's trace.



-- 
Grant. . . .
unix || die


[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/pkcs7-signature, Size: 4008 bytes --]

Re: Trace routing path

[Leroy Tennison]
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