Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Recently I discovered that some pings sent to me were giving a TTL error. When someone pings my computer, it shows a different TTL value for every packet.

For example, shows that:

--- PING ( 56(84) bytes of data. ---
64 bytes from icmp_req=1 ttl=112 time=78.7 ms
64 bytes from icmp_req=2 ttl=17 time=78.8 ms
64 bytes from icmp_req=3 ttl=206 time=78.7 ms
64 bytes from icmp_req=4 ttl=212 time=78.7 ms

--- ping statistics ---
packets transmitted  4 
received  4 
packet loss  0 % 
time  3002 ms 

--- Round Trip Time (rtt) ---
min  78.734 ms 
avg  78.782 ms 
max  78.861 ms 
mdev  0.050 ms 

(And sometimes I see request timed out and TTL expired errors as well.)

As you can see, every packet has a different TTL value. Is that a problem? If it is, is it caused by my network configuration, or is it caused by my ISP? And what can I do in this situation?

If it matters, I use a WRT54GH home router with ZyXEL ADLS bridge modem, connecting three Windows computers. You can try to ping me at my IP address,

share|improve this question
That looks reeeeeealy funky. Like it's the official "Routing Table Shuffling Day" or something. – Mathias R. Jessen Jul 24 '12 at 20:57

2 Answers 2

up vote 6 down vote accepted

I got similar results pinging your IP address from the US.

When I pinged, the next hop upstream from you, which I presume is your ISP's equipment, I got back a TTL of 243 every time. This is obviously wrong.

The next hop upstream from that acted reasonably, with a TTL of 54 every time.

My strong suspicion based on these results is that your ISP is mangling the packets.

share|improve this answer
Thank you, i will contact my ISP soon. – Burak Tamtürk Jul 24 '12 at 21:07
when i tracert to google, first host is and the second is But when you tracert to me, is the last hop is If so, different host handle the connection every time? Am i wrong? – Burak Tamtürk Jul 24 '12 at 21:14 and are a point-to-point link between two routers. When you traceroute from one side (e.g. US to Turkey) you see responses from one network interface, and when you traceroute from the other side (e.g. Turkey to US) you see responses from the other network interface. So, and are two different interfaces on the same router. – Michael Hampton Jul 24 '12 at 21:20
Ok, when i ping ttl is 62, when i ping ttl is 254. Which is wrong? When i tracert to there is total 3 hops, when i tracert to there is 2 hops. So i assuming the problem is caused by ISP, and its too bad to me, because my isp will not (can not) understant and solve problem. Doesnt matter whatever the problem is they say this every time "reboot your modem", then "take a speedtest, if speed is not lower than xmbit, there is no problem". – Burak Tamtürk Jul 24 '12 at 21:30
254 is definitely wrong, so you've identified the router and network interface that has the problem. Good luck finding the correct person at your ISP to report the problem to. (He exists, but technical support is meant to prevent you from talking to him...) – Michael Hampton Jul 24 '12 at 21:40

Providing your not pinging yourself the TTLs that come back are the TTL values of the received ping packet. There is little you can do to manipulate that.

share|improve this answer
Is it caused by my modem, or isp? – Burak Tamtürk Jul 24 '12 at 20:52
Typically the ttl is reduced by one on each hop. What you see here is traffic coming back to you taking different routes. I'd imagine someone's router along the route is flapping and sending packets crazy routes. - The bit I'm not sure about is why both routes give the same latency. Perhaps it's the same route but a device in the middle isn't altering the ttl correctly. – Sirex Jul 24 '12 at 20:57
I know that, but i think its worst thing can be done to my network. I just think my network is unstable. A computer at Ankara access my computer without problem. But a virtual server from netherlands, can't proxy http request to me (it proxy, but sometimes very slow response time). – Burak Tamtürk Jul 24 '12 at 21:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.