Pinging *.5 and replies from *.4

2

This may belong on SF, migrate if it does!

Pinging 192.168.1.5 with 32 bytes of data:
Reply from 192.168.1.4: Destination host unreachable.
Reply from 192.168.1.4: Destination host unreachable.
Reply from 192.168.1.4: Destination host unreachable.
Reply from 192.168.1.4: Destination host unreachable.

Pinging a windows machine on my home network with the IP 192.168.1.5, Windows is trying to get replies from 192.168.1.4. The machine I am pinging has an automatically obtained IP and it can access the internet fine. The machine I'm pinging from is able to ping any other machine on the network just fine.

I've never encountered anything like this before.

Can anyone shed some light? Why would this be happening?

Things I haven't tried yet:

  • Rebooting router
  • Rebooting my machine
  • Rebooting target machine (or renewing target IP)

Edit: Pinging any "unassigned" IP on the network will try to get replies from my own IP (192.168.1.1 will try to get replies from my own IP) - thanks to regan's answer for pointing me that way. I'm 100% sure this machine is connected to the same network and there is no firewall active.

Ciaran

Posted 2009-09-08T21:35:04.887

Reputation: 4 078

this is how it's supposed to work – davr – 2009-09-09T00:40:42.507

@ Ciaran - you may want to mention that your own IP, in the example above, is 192.168.1.4. – J. Polfer – 2009-09-09T13:36:32.370

Answers

5

To shed some light:

  • When you can't ping the IP of a machine, your own IP says it is unreachable.

Things to try:

  1. Try the things you haven't tried yet to clean out possible clutter in an easy way.
  2. Try to ping the target machine from another machine to see if the target machine is the problem, if the other machine succeeds them the problem is more likely on your machine than on the target machine.
  3. In the case that the target machine is the problem, you might want to run the following command as an administrator to enable pings: netsh firewall set icmpsetting all enable
  4. If the case that your machine is the problem then it is a weird case, for some reason it doesn't see the target machine but still sees the other machines, but that is a case that normally isn't so common.

Please let us know if this helped or if you have more details. For more information and other possible less general causes, see this on Google: "Destination Unreachable" site:microsoft.com

Tamara Wijsman

Posted 2009-09-08T21:35:04.887

Reputation: 54 163

Thanks! So its by design. Learn something new every day. – Ciaran – 2009-09-11T21:07:24.517

5

Make sure the firewall on your target machine isn't blocking ICMP requests.

Is 192.168.1.4 your machine's IP address? I tried pinging an unassigned IP address just now and the "replies" came from my own IP address.

regan

Posted 2009-09-08T21:35:04.887

Reputation: 712

1192.168.1.4 is actually my IP. There is no firewall. I am 100% sure the address is assigned (I have physical access to this machine) – Ciaran – 2009-09-08T21:46:48.997

Can you ping .4 from .5? As regan said, if it is saying your local machine is returning it as unreachable, that means that the echo request (ping) was never returned by .5 – MDMarra – 2009-09-08T23:04:01.620

1

Are your devices plugged directly into the router or is there a switch in between? I would recommend rebooting the switch or router they are plugged into, as I've seen it where the MAC address table get "confused" for lack of a better term.

emgee

Posted 2009-09-08T21:35:04.887

Reputation: 4 487

Everything's wirelessly connected to a router. Nothing in between. I don't really want to reboot anything just yet, I just want to know if there's a reason for this happening. Some RCA if you will – Ciaran – 2009-09-08T22:00:53.367

Gotcha. You mention being able to connect to other wireless devices on the network — are all these devices connected wirelessly? I ask because there's often a setting on wireless routers for whether clients can connect to one another. – emgee – 2009-09-08T22:33:54.627

0

As said above, 192.168.1.4 is your address.

I'm going to go out on a limb here and guess that 192.168.1.5 is a windows machine, and the ICMP filtering in the Windows firewall is enabled. By default(?) Windows firewalls are set to drop ICMP echo requests, on the theory that if you can't ping 'em, the bad guys won't know the system exists and can't apply the windows vulnerability du jour. Of course this means that the bad guys don't bother with ping probes any more and just send the vulneability du jour out to random IPs hoping to get lucky.

If .5 is an XP system, go to the Control Panel -> Network Connections -> Local Connection -> Advanced -> Firewall Settings -> Advanced -> ICMP Settings ... and look at Allow Incoming Echo Request. I suspect it isn't set.

This "feature" causes some hilarity with some DHCP servers which ping IP addresses before offering them as leases, on the theory that if something answers the ping, the IP address isn't allocatable. However, if things on the network no longer answer pings, you start getting IP address conflict fun.

David Mackintosh

Posted 2009-09-08T21:35:04.887

Reputation: 3 728