Start » Analysis » Results
Result Summary
c-98-248-46-159.hsd1.ca.comcast.net / 98.248.46.159
Recorded at 12:37 PDT (19:37 UTC), Jun 09 2009. Permalink. Client/server transcript.

Summary of Noteworthy Events
Address-based Tests
NAT detection (?): NAT Detected

Your global IP address is 98.248.46.159 while your local one is 192.168.1.50. You are behind a NAT. Your local address is in unroutable address space.

Your machine numbers TCP source ports sequentially. The following graph shows connection attempts on the X-axis and their corresponding source ports used by your computer on the Y-axis.

port sequence plot

Local Network Interfaces (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
DNS-based host information (?): OK
You are not a Tor exit node for HTTP traffic.
You are listed on the Spamhaus Policy Based Blacklist, meaning that your provider has designated your address block as one that should only be sending authenticated email, email through the ISP's mail server, or using webmail.
The SORBS DUHL believes you are using a statically assigned IP address.
Reachability Tests
TCP connectivity (?): Not executed
Direct TCP access to remote FTP servers (port 21) is allowed.
Direct TCP access to remote SSH servers (port 22) is allowed.
Direct TCP access to remote SMTP servers (port 25) is allowed.
Direct TCP access to remote DNS servers (port 53) is allowed.
Direct TCP access to remote HTTP servers (port 80) is allowed.
Direct TCP access to remote POP3 servers (port 110) is allowed.

Direct TCP access to remote RPC servers (port 135) is blocked.

This is probably for security reasons, as this protocol is generally not designed for use outside the local network.

Direct TCP access to remote NetBIOS servers (port 139) is blocked.

This is probably for security reasons, as this protocol is generally not designed for use outside the local network.

Direct TCP access to remote IMAP servers (port 143) is allowed.
Direct TCP access to remote SNMP servers (port 161) is allowed.
Direct TCP access to remote HTTPS servers (port 443) is allowed.

Direct TCP access to remote SMB servers (port 445) is blocked.

This is probably for security reasons, as this protocol is generally not designed for use outside the local network.

Direct TCP access to remote SMTP/SSL servers (port 465) is allowed.
Direct TCP access to remote secure IMAP servers (port 585) is allowed.
Direct TCP access to remote authenticated SMTP servers (port 587) is allowed.
Direct TCP access to remote IMAP/SSL servers (port 993) is allowed.
Direct TCP access to remote POP/SSL servers (port 995) is allowed.
Direct TCP access to remote SIP servers (port 5060) is allowed.
Direct TCP access to remote BitTorrent servers (port 6881) is allowed.
UDP connectivity (?): OK
Basic UDP access is available.
Direct UDP access to remote DNS servers (port 53) is allowed.
Traceroute (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
Path MTU (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
Network Access Link Properties
Network latency measurements (?): Latency: 81ms Loss: 0.0%
The round-trip time (RTT) between your computer and our server is 81 msec, which is good.
We recorded no packet loss between your system and our server.
TCP connection setup latency (?): 91ms
The time it takes your computer to set up a TCP connection with our server is 91 msec, which is good.
Network background health measurement (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
Network bandwidth measurements (?): Upload 11 Mbit/sec, Download >20 Mbit/sec
Your Uplink: We measured your uplink's sending bandwidth at 11 Mbit/sec. This level of bandwidth works well for many users.
Your Downlink: We measured your downlink's receiving bandwidth at >20 Mbit/sec. This level of bandwidth works well for many users.
During this test, the applet observed 3 reordered packets.
Network buffer measurements (?): Uplink 180 ms, Downlink is good
We estimate your uplink as having 180 msec of buffering. This level may serve well for maximizing speed while minimizing the impact of large transfers on other traffic.
We were not able to produce enough traffic to load the downlink buffer, or the downlink buffer is particularly small. You probably have excellent behavior when downloading files and attempting to do other tasks.
HTTP Tests
Address-based HTTP proxy detection (?): OK
We detected no explicit sign of HTTP proxy via IP address changes.
Content-based HTTP proxy detection (?): OK
No HTTP header or content changes hint at the presence of a proxy.
HTTP proxy detection via malformed requests (?): OK
Deliberately malformed HTTP requests arrive at our server unchanged. We are not able to detect a proxy along the path to our server using this method.
Filetype-based filtering (?): OK
We did not detect file-content filtering.
HTTP caching behavior (?): OK
We detected no signs of a transparent HTTP cache in your network path.
JavaScript-based tests (?): OK
The applet did not execute within a frame.
Your web browser reports the following cookies for our web page:
  • netAlizEd (set by our server)
Your web browser was unable to fetch an image using IPv6.
DNS Tests
Restricted domain DNS lookup (?): Failed
Restricted DNS lookup test failed to complete.
Unrestricted domain DNS lookup (?): Failed
Unable to lookup a name not associated with our server.
Direct DNS support (?): OK
All tested DNS types were received OK.
Direct EDNS support (?): Note
EDNS-enabled requests for small responses remain unanswered. This suggests that a proxy or firewall is unable to handle extended DNS requests.
EDNS-enabled requests for medium-sized responses remain unanswered. This suggests that a proxy or firewall is unable to handle extended DNS requests or DNS requests larger than 512 bytes.
EDNS-enabled requests for large responses are answered successfully.
DNS resolver address (?): OK
The IP address of your ISP's DNS Resolver is 98.248.46.159, which resolves to c-98-248-46-159.hsd1.ca.comcast.net.
DNS resolver properties (?): Lookup latency 15ms
Your ISP's DNS resolver requires 15 msec to conduct an external lookup, and 1 msec to lookup an item in the cache.
Your resolver is using QTYPE=A for default queries.
Your resolver is not automatically performing IPv6 queries.
Your DNS resolver requests DNSSEC records.
Your DNS resolver advertises the ability to accept DNS packets of up to 4096 bytes.
Your DNS resolver can successfully receive a large (>1500 byte) DNS response.
Your resolver does not use 0x20 randomization, but will pass names in a case-sensitive manner.
Your ISP's DNS resolver respects a TTL of 0 seconds.
Your ISP's DNS resolver respects a TTL of 1 seconds.
No transport problems were discovered which could affect the deployment of DNSSEC.
DNS glue policy (?): Failed
Your ISP's DNS resolver does not accept generic additional (glue) records — good.
Your ISP's DNS resolver accepts additional (glue) records for nameservers located in subdomains of the queried domain.
DNS resolver port randomization (?): OK
Your ISP's DNS resolver properly randomizes its local port number.

The following graph shows DNS requests on the x-axis and the detected source ports on the y-axis.

port sequence plot

DNS lookups of popular domains (?): OK
74 of 74 popular names were resolved successfully. In the following table reverse lookups that failed but for which a Start Of Authority (SOA) entry indicated correct name associations are shown using an "X", followed by the SOA entry. Absence of both IP address and reverse name indicates failed forward lookups.
Name IP Address Reverse Name/SOA
www.abbey.co.uk 165.160.13.20 X (pdns1.cscdns.net)
ad.doubleclick.net 216.73.87.153 eqvamegaadvip3.doubleclick.net
www.alliance-leicester.co.uk 194.130.105.121 X (alice.ioko365.com)
www.amazon.com 207.171.166.252 166-252.amazon.com
www.ameritrade.com 204.58.27.121 beta-new.tdameritrade.com
www.bankofamerica.com 171.159.193.173 www.bankofamerica.com
www.bankofscotland.co.uk 195.171.171.21 X (ns0.bt.net)
www.bankofthewest.com 207.114.194.101 X (dns1a.bankofthewest.com)
www.barclays.co.uk 213.219.1.141 X (dns1.lon7.telecityredbus.net)
www.capitalone.com 208.80.48.112 X (chia.arin.NET)
www.careerbuilder.com 208.82.7.22 X (smokey.careerbuilder.com)
www.chase.com 159.53.60.105 X (ns1.jpmorganchase.com)
chaseonline.chase.com 159.53.64.54 resources-cdc2.chase.com
www.citi.com 192.193.232.227 X (ns.citicorp.com)
www.citibank.com 192.193.232.227 X (ns.citicorp.com)
www.citimortgage.com 192.193.103.118 X (ns.citicorp.com)
www.cnn.com 157.166.226.25 www.cnn.com
www.desjardins.com 142.195.192.35 desjardins.com
www.deutsche-bank.de 217.73.49.24 www.deutsche-bank.de
www.e-gold.com 209.200.169.10 unknown.prolexic.com
www.ebay.com 66.135.214.176 hp-core.ebay.com
www.etrade.com 12.153.224.22 etrade.com
www.facebook.com 69.63.186.30 www.12.06.ash1.facebook.com
www.fdic.gov 167.176.17.84 www.fdic.gov
www.friendfinder.com 208.88.180.81 X (ii53-30.friendfinderinc.com)
www.geocities.com 98.137.46.72 intl1.geo.vip.sp2.yahoo.com
www.google.com 74.125.19.147 cf-in-f147.google.com
www.halifax.co.uk 212.140.245.97 www.halifax.co.uk
www.hsbc.co.uk 193.108.74.126 X (ns3.hsbc.com)
www.jpmorganchase.com 159.53.60.166 X (ns1.jpmorganchase.com)
www.lloydstsb.com 193.34.230.181 X (ns2.lloydstsb.co.uk)
mail.google.com 66.102.7.83 mc-in-f83.google.com
mail.live.com 64.4.20.186 dp4.mail.live.com
mail.yahoo.com 66.163.169.186 l1.login.vip.sp1.yahoo.com
www.mbna.com 209.135.59.10 X (ns1.usi.net)
www.mbna.net 209.135.59.10 X (ns1.usi.net)
www.meebo.com 208.81.191.110 X (ns1.meebo.com)
messenger.yahoo.com 68.142.194.14 myc1.msg.vip.mud.yahoo.com
www.microsoft.com 207.46.192.254 wwwtk2test1.microsoft.com
www.nationwide.co.uk 155.131.127.10 www.nationwide.co.uk
www.networksolutions.com 205.178.187.13 www.networksolutions.com
www.newegg.com 216.52.208.185 X (pdns1.ultradns.net)
www.nordea.fi 195.215.15.166 www.nordea.fi
online.citibank.com 192.193.187.61 citibankonline.com
online.wellsfargo.com 151.151.13.132 psaltery-on.wellsfargo.com
www.orange.fr 193.252.149.20 www.orange.fr.s1.fti.net
pagead.googlesyndication.com 74.125.19.166 cf-in-f166.google.com
partner.googleadservices.com 74.125.19.165 cf-in-f165.google.com
www.paypal.com 64.4.241.49 node-64-4-241-4[...]orks.paypal.com
www.rbs.co.uk 155.136.80.222 X (ns0-08.dns.pipex.net)
www.schwab.com 162.93.224.80 wwwschwab-vip.schwab.com
www.sears.com 69.192.73.99 a69-192-73-99.d[...]echnologies.com
www.secureworks.com 65.114.32.183 www.secureworks.net
smartzone.comcast.net 76.96.26.12 webmail3.emeryv[...]ail.comcast.net
www.smithbarney.com 192.193.224.11 ssb.com
www.sparkasse.de 195.140.127.130 www.sparkasse.de
www.sterlingsavingsbank.com 12.19.55.215 sterlingsavingsbank.com
www.tdameritrade.com 204.58.27.113 beta-new.tdameritrade.com
www.ticketmaster.com 96.7.100.199 a96-7-100-199.d[...]echnologies.com
www.trendmicro.com 96.17.164.160 a96-17-164-160.[...]echnologies.com
us.etrade.com 198.93.34.50 us.etrade.com
www.usbank.com 170.135.216.181 usbankhomeloan.com
www.verisign.com 65.205.249.60 www.verisign.net
www.wachovia.com 169.200.89.101 X (sls-ns1.wachovia.com)
www.wamu.com 167.88.184.51 www.wamu.com
www.wellsfargo.com 151.151.13.133 psaltery-dd.wellsfargo.com
westernunion.com 206.201.228.250 www.wuagentlink.com
windowsupdate.microsoft.com 207.46.18.94 X (msnhst.microsoft.com)
wireless.att.com 135.209.208.191 origin-busine[...]eless.att.com
www.yahoo.com 209.131.36.158 f1.www.vip.sp1.yahoo.com
4 popular names have a mild anomaly. The ownership suggested by the reverse name lookup does not match our understanding of the original name. The most likely cause is the site's use of a Content Delivery Network.
Name IP Address Reverse Name/SOA
www.f-secure.com 77.67.91.98 X (ns-pri.ripe.net)
www.irs.gov 77.67.91.122 X (ns-pri.ripe.net)
www.postbank.de 195.50.155.73 X (ns1.arcor-ip.de)
www.visa.com 77.67.91.112 X (ns-pri.ripe.net)
DNS external proxy (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
DNS results wildcarding (?): OK
Your ISP correctly leaves non-resolving names untouched.
DNS-level redirection of specific sites (?): OK
Your ISP does not appear to be using DNS to redirect traffic for specific websites.
IPv6 Tests
DNS support for IPv6 (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
IPv4, IPv6, and your web browser (?): Not executed
JavaScript is not enabled for the Netalyzr site.
IPv6 connectivity (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
Host Properties
System clock accuracy (?): Not executed
The test was not executed. Required functionality was unavailable or not permitted, or this session dates from a time before Netalyzr supported this test.
Browser properties (?): OK
Your web browser sends the following parameters to all web sites you visit:
  • User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 GTB5 (.NET CLR 3.5.30729)
  • Accept: text/html,application/xhtml+xml,application/xml; q=0.9,*/*; q=0.8
  • Accept Language: en-us,en;q=0.5
  • Accept Encoding: gzip,deflate
  • Accept Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Uploaded data (?): OK
The applet uploaded no additional data.
Feedback
No feedback was reported for this session.