Tracert command in azure app services

Question

WinTechie 286

Hi,

I am looking for a command in azure app service kudu console to figure out network flow similar to 'tracert' which doesn't work.

I know I can run network troubleshooter but I need few networking commands specific network related troubleshooting

Tracing the network flows and hops in between from app service toa specific target
Fetching the outbound ip (VNet integrated) of the app service

1 answer

Answer 1

Michael Durkan 12,256 MVP

Hi

Azure Network Watcher should be able to give you this functionality:

You could interrogate your NSG Flow Logs if they are enabled:

Hope this helps,

Thanks

Michael Durkan

If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

WinTechie 286 Reputation points

2023-10-25T11:26:51.5833333+00:00

Hi Michael,

Thanks for your inputs!

However, Network watcher's various tools/utilities are mainly focused on Virtual machines, it doesn't even allow to choose a Resource group where VM is not provisioned.

My requirement is mainly focused on VNet integrated Azure App services and any tools/command regardless of kudu console or anything else which can help me troubleshoot certain things from network perspective like finding trace of the request initiated by app service

As far as NSG flow logs are concerned, No I don't have that enabled moreover it doesn't fit the highlighted requirement as flow logs provide lot of information than just what I am looking for.
Grmacjon-MSFT 19,491 Reputation points Moderator

2023-11-02T04:31:27.9266667+00:00

Do you have flexibility in your requirements?
AMoeller 15 Reputation points

2024-11-25T19:18:48.6166667+00:00

I am having a similar issue when trying to trace from one Linux\Windows Web Application to another that exists in our environment and lives in a different subnet and also to a data plane with multiple DBs to see why connections are getting 499 and 500 errors.

Is there a two-in-network watch that allows you to just give a source and destination IP with a port to test a connection and see how many hops a single connection takes to find the issue within our network routing or firewall?