{"id":821,"date":"2012-07-25T23:32:42","date_gmt":"2012-07-25T23:32:42","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=821"},"modified":"2018-09-06T23:00:52","modified_gmt":"2018-09-06T23:00:52","slug":"using-pathping","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=821","title":{"rendered":"Using Pathping"},"content":{"rendered":"

One of my favorite Windows tools is pathping. Pathping is a Windows based command-line tool used to provide information about the path data takes to its intended destination, network latency and network loss at intermediate hops between a source and destination. We will cover what latency is as well as what hops are and so on within this article. We will also look at how to use pathping while trying to troubleshoot real world problems. This will help to reinforce the tool’s usefulness and show you ways in which to use it when working on your own production networks.<\/p>\n

Introduction:<\/h2>\n

Pathping is a TCP\/IP based utility (command-line tool) that provides useful information about network latency and network loss at intermediate hops between a source address and a destination address. It does this by sending echo requests via ICMP and analyzing the results. ICMP stands for Internet Control Message Protocol. ICMP is an extension to the Internet Protocol (IP – part of the TCP\/IP protocol suite) defined by RFC 792<\/a>. ICMP supports packets containing error, control and informational messages. Pathping will send multiple echo request messages to each router between what you are attempting to ping \u2013 the source address. If your destination is across a\u00a0WAN link then it\u2019s certain that you will be using some form of router, most likely two, which would mean that you could test pathping across a two hop network \u2013 two router hops. A typical network diagram is seen in the following illustration.<\/p>\n

Typical WAN
\n\"\"<\/p><\/blockquote>\n

This is a typical WAN setup which shows you two sites that are connected via a T1 and an Integrated Services Digital Network (ISDN) link. What\u2019s important to see here is that there are multiple paths throughout the network. There is a T1 and an ISDN link. Both technologies connect\u00a0to each site. The T1 is the main link operating at 1.544 Mbps and the ISDN link is the back up in case the primary fails. Since ISDN is a technology that allows you to pay as you use it, it is a\u00a0perfect\u00a0technology to lay dormant until needed. It has\u00a0less transmission speed (perhaps 64 Kbps), but at the same time, it\u2019s only for emergency so it may be good enough for critical services. The bandwidth drop will add more time for packets to traverse the network and add latency or delay to the traffic. Latency is a measurement of how long it takes for a data packet to get from one point to another. Pathping is a good testing for\u00a0this element. Latency can be measured by sending a packet as a test that will be returned back to the sender and from that time period – the round-trip time \u2013 that is what is considered the latency.<\/p>\n

You can use a tool like pathping to see not only if your packets are making it across the network, but are taking the correct preferred path (the T1), or flowing over the alternate link (which would indicate a misconfiguration or a downed link) which is ISDN and, if you have bottlenecks on your network, to see if you have any latency issues. Lack of bandwidth and latency or delay may cause time out issues for your data transmissions. \u00a0Using the pathping tool you can send multiple echo request messages to each router between you (the source) and your intended destination and after a specific amount of time has elapsed, computes the results from the data that it receives back from each router the packets traversed. Pathping will then display the results.<\/p>\n

Syntax<\/h2>\n

To use pathping, you simply need to open a command prompt\u00a0on the source system you will run the test from. If you want to use the next illustration as an example, adding an\u00a0IP address will help you to perform the test. You can see that we have a test PC located at site B and the IP address is 10.1.2.4. This system wants to pathping to site A, a server with an IP address of 10.1.1.5.<\/p>\n

\"\"<\/p><\/blockquote>\n

Running pathping is easy. Open a command prompt (start -> run -> cmd -> pathping) and type pathping.<\/p>\n

\"\"<\/p><\/blockquote>\n

As listed here, you can see that the pathping command has many options to include<\/p>\n

\n\n\n\n\n\n\n\n\n
\n

-n<\/strong><\/p>\n<\/td>\n

\n

Prevents pathping from attempting to resolve the IP addresses of intermediate routers to their names. You may want to consider doing this if you think you have a name resolution issue, or if DNS for example is not configured on your system \u2026 the time spent trying to contact a name server can be avoided using this switch.<\/p>\n<\/td>\n<\/tr>\n

\n

-h<\/strong><\/p>\n<\/td>\n

\n

Specifies the maximum number of hops in the path to search for the target (destination). The default is 30 hops.<\/p>\n<\/td>\n<\/tr>\n

\n

-p<\/strong><\/p>\n<\/td>\n

\n

Specifies the number of milliseconds to wait between consecutive pings. The default is 250 milliseconds (1\/4 second).<\/p>\n<\/td>\n<\/tr>\n

\n

-q<\/strong><\/p>\n<\/td>\n

\n

Specifies the number of Echo Request messages sent to each router in the path. The default is 100 queries.<\/p>\n<\/td>\n<\/tr>\n

\n

-w<\/strong><\/p>\n<\/td>\n

\n

Specifies the number of milliseconds to wait for each reply. The default is 3000 milliseconds (3 seconds).<\/p>\n<\/td>\n<\/tr>\n

\n

\/?<\/strong><\/p>\n<\/td>\n

\n

Displays help at the command prompt<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/blockquote>\n

There are more options, but these are the most commonly used. You can use the help feature to learn more about the options as they are listed in the Windows command prompt.<\/p>\n

To use pathping, launch the pathping command from the source to the destination and let pathping do its computation.<\/p>\n

\n\n\n\n
D:\\>pathping -n server-1<\/p>\n

Tracing route to server-1 [10.1.1.5]
\nover a maximum of 30 hops:
\n0\u00a0 10.1.2.1
\n1\u00a0 10.1.1.1
\n2\u00a0 10.1.1.5<\/p>\n

Computing statistics for 50 seconds…
\nSource to Here\u00a0\u00a0 This Node\/Link
\nHop\u00a0 RTT\u00a0\u00a0\u00a0 Lost\/Sent = Pct\u00a0 Lost\/Sent = Pct\u00a0 Address
\n0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a010.1.2.1
\n0\/ 100 =\u00a0 0%\u00a0\u00a0 |
\n1\u00a0\u00a0 35ms\u00a0\u00a0\u00a0\u00a0 0\/ 100 =\u00a0 0%\u00a0\u00a0\u00a0\u00a0 0\/ 100 =\u00a0 0%\u00a0 10.1.1.1
\n13\/ 100 = 13%\u00a0\u00a0 |
\n2\u00a0\u00a0 28ms\u00a0\u00a0\u00a0 16\/ 100 = 16%\u00a0\u00a0\u00a0\u00a0 3\/ 100 =\u00a0 3%\u00a0 10.1.1.5
\n0\/ 100 =\u00a0 0%\u00a0\u00a0 |<\/p>\n

Trace complete.<\/p>\n

(some output omitted)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/blockquote>\n

Although in this example, I skimmed it down to the basics and omitted some of the text so we can look right at what we need to know \u2013 the statistics and how to read them. In this example, we see that there is a little latency on the second hop, which is 10.1.1.1, traversing the link to the next hop which is 10.1.1.5. In this section we see a small amount of latency which is normal for this size and speed link. If\u00a0the milliseconds rate were\u00a0at a very high number, such as 500 ms, then you might consider\u00a0having a bandwidth issue. As you can see, pathping doesn\u2019t only \u2018verify\u2019 connectivity to a destination host, but also, it shows you how your traffic is getting there, and how fast its going, how much resistance its encountering over the wide area network \u2013 which is a very common choke point.<\/p>\n

Here is another example, but here, I am on a production network machine using pathping to test within a production LAN out to the Internet to a Web server.<\/p>\n

\"\"<\/p><\/blockquote>\n

When you run pathping, you will also have to be a little patient. Pathping will first display your results as if you were using tracert or traceroute, which is a similar utility to be covered in a separate article. Tracert will show you the \u2018path\u2019 through the network as well as verify connectivity but will not show you how the packet is traversing in relation to speed, bandwidth usage and latency. Next (and this is where patience sets in), depending on the hop count (how many router hops that need to be analyzed), check pathping\u2019s results for the Lost\/Sent = Pct and Address columns show that the links may either be over utilized (if you have a high drop rate) and so on. The loss rates displayed for the links, identified as a vertical bar (|) in the Address column, indicate link congestion that is causing the loss of packets that are being forwarded on the path. The loss rates displayed for routers (identified by their IP addresses) indicate that these routers may have a problem with overloading or saturation.<\/p>\n

Note<\/strong>:
\nIf you see the \u2018*\u2019 sign, don\u2019t fret immediately \u2013 there may be a firewall blocking ICMP, so you may not get the response although the site is up and responsive. ACL (access control lists) and firewall rule-sets commonly throw off network testers because of this fact. Make sure you know the layout of your network if you are going to troubleshoot it and take this into consideration as it is commonly seen.<\/p><\/blockquote>\n

Summary<\/h2>\n

In this article we covered the basics of using pathping. Make sure you visit the links section to learn more about ICMP and how to use pathping. Stay tuned for more articles about how to troubleshoot your production networks!<\/p>\n

ICMP RFC 792
\nhttp:\/\/www.faqs.org\/rfcs\/rfc792.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

One of my favorite Windows tools is pathping. Pathping is a Windows based command-line tool used to provide information about the path data takes to its intended destination, network latency and network loss at intermediate hops between a source and destination. We will cover what latency is as well as what hops are and so […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,1],"tags":[],"class_list":["post-821","post","type-post","status-publish","format-standard","hentry","category-computer-tech-stuff","category-networking-stuff"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/821","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=821"}],"version-history":[{"count":5,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/821\/revisions"}],"predecessor-version":[{"id":2626,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/821\/revisions\/2626"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=821"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=821"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=821"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}