JPAN Command Line Tool

JPAN-CLI is a tool that allows echo, traceroute, showpaths, ... and other functionality, similar to the SCION CLI tool. JPAN-CLI is stand-alone based on JPAN and does not require any locally installed SCION software.

JPAN-CLI provides several tools:

• jpan-cli address - Show (one of) this host’s SCION address(es)

• jpan-cli ping - Test connectivity to a remote SCION host using SCMP echo packets

• jpan-cli ping-responder - Run a local server that responds to incoming SCION pings

• jpan-cli showpaths - Display paths to a SCION AS

• jpan-cli traceroute - Trace the SCION route to a remote SCION AS using SCMP traceroute packets

• jpan-cli version - Show the SCION version information

Usage

The tool can be run from the executable jar file which is available in the GitHub Releases section or with:

wget https://github.com/netsec-ethz/jpan-cli/releases/download/v0.2.2/jpan-cli.jar.

It can be executed with:

java -jar jpan-cli.jar [tool-command]

For example, to get command line help, the tool can be executed with:

java -jar jpan-cli.jar help

Troubleshooting

No ping/traceroute answers received

There may be a NAT or proxy between your machine and the border router. This is a likely scenario when you are using WLAN. Some border routers support NAT traversal. NAT support can be enabled with java -Dorg.scion.nat=auto -jar jpan-cli.jar showpaths [your destination].

With ping and traceroute, another option is to use --healthy-only to avoid using a path that is broken.

No DNS search domain found. Please check your /etc/resolv.conf or similar.

This happens, for example, on Windows when using a VPN. One solution is to execute the jar with the following property ( the example works only for ethz.ch):

java -Dorg.scion.dnsSearchDomains=ethz.ch. -jar jpan-cli.jar

Acknowledgements

Functionality and documentation borrow heavily from the original scion tool (docs).