Error map

ICMP Destination unreachable (Port unreachable) Networking: ICMP Destination unreachable (Port unreachable) — UDP packet sent to a port where nothing is listening

Networking · layer 2, Network

Open the full error page →

Centre: this error. First ring: errors it is linked with (9). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

ICMP Destination unreachable (Port unreachable) — Networking: ICMP Destination unreachable (Port unreachable) — UDP packet sent to a port where nothing is listening (Networking)ICMP Destin…Ping: Request timed out — Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP) (Networking)Ping: Request timed…PING: transmit failed. General failure. — Networking: PING: transmit failed. General failure. / ping: sendmsg: Operation not permitted (Networking)PING: transmit fail…nc/telnet hangs: firewall DROP vs REJECT — Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused") (Networking)nc/telnet hangs: fi…UDP RcvbufErrors / packet receive errors — Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer (Networking)UDP RcvbufErrors / …WireGuard: Handshake did not complete after 5 seconds — Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes (Networking)WireGuard: Handshak…Reply from 192.168.1.1: Destination host unreachable — Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3) (Networking)Reply from 192.168.…Reply from x: TTL expired in transit — Networking: TTL expired in transit — routing loop between routers (Networking)Reply from x: TTL e…Frag needed and DF set (ICMP type 3 code 4) — Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set (Networking)Frag needed and DF …dig: status: REFUSED (recursion not available) — Networking: dig: status: REFUSED / recursion requested but not available — the DNS server won't resolve queries for you (Networking)dig: status: REFUSE…1020 — Cloudflare Error 1020: Access Denied (Cloudflare)1020iptables: No chain/target/match — driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name (Docker)iptables: No chain/…ssh port 22 Connection timed out — ssh: connect to host x port 22: Connection timed out (Linux)ssh port 22 Connect…WSL 2 installation is incomplete — Docker Desktop: WSL 2 installation is incomplete / WSL update required (Docker)WSL 2 installation …Network cable unplugged / NO-CARRIER — Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged (Networking)Network cable unplu…No Wi-Fi adapter found / Wi-Fi option missing — Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed (Networking)No Wi-Fi adapter fo…No route to host — connect: No route to host (EHOSTUNREACH) (Linux)No route to host40615 — Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615) (Azure)40615ERR_CONNECTION_TIMED_OUT — ERR_CONNECTION_TIMED_OUT: This site can’t be reached — example.com took too long to respond (Browser)ERR_CONNECTION_TIME…arp -a shows (incomplete) — Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop (Networking)arp -a shows (incom…Port forwarding not working (CGNAT / double NAT) — Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT (Networking)Port forwarding not…High TCP retransmissions / packet loss — Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path (Networking)High TCP retransmis…4-way handshake timeout / Incorrect password — Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY (Networking)4-way handshake tim…Connections hang on large transfers (PMTU black hole) — Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole (Networking)Connections hang on…VPN connected but internal subnets unreachable — Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets (Networking)VPN connected but i…404 — HTTP 404 Not Found (HTTP)404405 — HTTP 405 Method Not Allowed (HTTP)405Network is unreachable — connect: Network is unreachable (ENETUNREACH) (Linux)Network is unreacha…1019 — Cloudflare Error 1019: Compute server error (Workers) (Cloudflare)1019554 5.4.14 Hop count exceeded - possible mail loop — SMTP: 554 5.4.14 Hop count exceeded - possible mail loop (Email / SMTP)554 5.4.14 Hop coun…OSPF neighbor stuck in EXSTART/EXCHANGE — Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch) (Networking)OSPF neighbor stuck…1033 — Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected) (Cloudflare)1033cloudflared Unable to reach the origin service — cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502) (Cloudflare)cloudflared Unable …Pending validation — ACM certificate stuck in Pending validation (AWS)Pending validationlookup registry-1.docker.io: no such host — dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build (Docker)lookup registry-1.d…DNS in pod — DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve) (Kubernetes)DNS in pod

Directly related (9)

Ping: Request timed outNetworking

Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP)

No echo reply arrived in time: the host is down, unreachable, or simply ignores ping.

PING: transmit failed. General failure.Networking

Networking: PING: transmit failed. General failure. / ping: sendmsg: Operation not permitted

The operating system could not even send the packet, so the problem is local (adapter, route or firewall), not the remote host.

nc/telnet hangs: firewall DROP vs REJECTNetworking

Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused")

A connection attempt gets no answer at all, which points to a firewall dropping the packets rather than a closed port.

UDP RcvbufErrors / packet receive errorsNetworking

Networking: netstat -su: packet receive errors, receive buffer errors — UDP datagrams dropped by a full socket buffer

UDP packets arrive faster than the application reads them, so the kernel throws the extras away.

WireGuard: Handshake did not complete after 5 secondsNetworking

Networking: Handshake for peer did not complete after 5 seconds, retrying (try 2) — WireGuard tunnel never establishes

The WireGuard peers can't complete the cryptographic handshake, so no traffic flows.

Reply from 192.168.1.1: Destination host unreachableNetworking

Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3)

A router (or your own PC) tells you it has no way to deliver the packet to that address.

Reply from x: TTL expired in transitNetworking

Networking: TTL expired in transit — routing loop between routers

A packet ran out of hops before arriving, which usually means two routers keep sending it back and forth.

Frag needed and DF set (ICMP type 3 code 4)Networking

Networking: ping: local error: message too long, mtu=1500 / Packet needs to be fragmented but DF set

A packet is larger than the path MTU and is marked "don't fragment", so a router discards it.

dig: status: REFUSED (recursion not available)Networking

Networking: dig: status: REFUSED / recursion requested but not available — the DNS server won't resolve queries for you

The DNS server answered, but its policy refuses to look up names for your address.

Two steps away (26)

1020Cloudflare

Cloudflare Error 1020: Access Denied

A Cloudflare firewall/WAF custom rule blocked the request — the visitor’s IP, country, user agent or request pattern matched a bl…

iptables: No chain/target/matchDocker

driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name

Docker’s iptables rules were wiped (firewalld/ufw reload, iptables flush) while Docker was running, so it can’t publish ports.

ssh port 22 Connection timed outLinux

ssh: connect to host x port 22: Connection timed out

SSH packets get no reply — a firewall/security group drops them, the server is off, or the IP is wrong.

WSL 2 installation is incompleteDocker

Docker Desktop: WSL 2 installation is incomplete / WSL update required

Docker Desktop on Windows needs WSL 2 and its Linux kernel; they’re missing, outdated or disabled.

Network cable unplugged / NO-CARRIERNetworking

Networking: Network cable unplugged / `ip link` shows NO-CARRIER state DOWN / Ethernet: Network cable unplugged

The network card sees no electrical link, so nothing above it (IP, DNS, browser) can work.

No Wi-Fi adapter found / Wi-Fi option missingNetworking

Networking: No Wi-Fi networks found — the Wi-Fi adapter is missing, disabled or its driver failed

The operating system doesn't see a working wireless adapter, so no networks can be listed.

No route to hostLinux

connect: No route to host (EHOSTUNREACH)

The destination host isn’t reachable — it’s down, on another subnet without routing, or a firewall rejects with “host unreachable…

40615Azure

Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615)

The Azure SQL server firewall doesn’t allow your client’s IP address.

ERR_CONNECTION_TIMED_OUTBrowser

ERR_CONNECTION_TIMED_OUT: This site can’t be reached — example.com took too long to respond

The browser waited for the server but got no response — the server is down/unreachable, a firewall drops traffic, or DNS points t…

arp -a shows (incomplete)Networking

Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop

The machine asked "who has this IP?" and nobody on the local network answered.

Port forwarding not working (CGNAT / double NAT)Networking

Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT

Your router forwards the port correctly, but another NAT in front of it (your ISP or a second router) blocks inbound connections.

High TCP retransmissions / packet lossNetworking

Networking: netstat -s: segments retransmitted / Wireshark: TCP Retransmission, TCP Dup ACK — packet loss on the path

Packets are being lost, so TCP resends them and throughput collapses.

4-way handshake timeout / Incorrect passwordNetworking

Networking: wlan0: WPA: 4-way handshake failed - pre-shared key may be incorrect / WRONG_KEY

The Wi-Fi association started but key negotiation failed, almost always a wrong password.

Connections hang on large transfers (PMTU black hole)Networking

Networking: SSH/HTTPS connects but hangs on large data — path MTU discovery black hole

Small packets pass but full-size ones vanish, so logins work and then transfers or page loads stall.

VPN connected but internal subnets unreachableNetworking

Networking: VPN is connected but I can't reach the internal network — missing routes, split tunnel or overlapping subnets

The tunnel is up, but traffic for the office/VPC subnets isn't sent through it or comes back the wrong way.

404HTTP

HTTP 404 Not Found

The server can’t find anything at the requested URL.

405HTTP

HTTP 405 Method Not Allowed

The URL exists, but it doesn’t accept the HTTP method you used (e.g. POST to a GET-only route).

Network is unreachableLinux

connect: Network is unreachable (ENETUNREACH)

The host has no route to the destination network — no default gateway, interface down, or trying IPv6 without IPv6 connectivity.

1019Cloudflare

Cloudflare Error 1019: Compute server error (Workers)

A Cloudflare Worker routed the request to a loop or hit an internal compute error.

554 5.4.14 Hop count exceeded - possible mail loopEmail / SMTP

SMTP: 554 5.4.14 Hop count exceeded - possible mail loop

The message passed through too many mail servers (usually over 25), which almost always means two systems forward mail to each ot…

OSPF neighbor stuck in EXSTART/EXCHANGENetworking

Networking: %OSPF-5-ADJCHG: Nbr 10.0.0.2 from EXSTART to DOWN — OSPF neighbor stuck in EXSTART/EXCHANGE (MTU mismatch)

Two OSPF routers see each other but never finish exchanging databases, cycling between EXSTART and DOWN.

1033Cloudflare

Cloudflare Error 1033: Argo Tunnel error (Cloudflare Tunnel not connected)

The hostname routes to a Cloudflare Tunnel, but no healthy cloudflared connector is running for it.

cloudflared Unable to reach the origin serviceCloudflare

cloudflared: Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared (502)

The tunnel is connected, but cloudflared can’t reach your local service at the address in the ingress rule.

Pending validationAWS

ACM certificate stuck in Pending validation

ACM is waiting to see the DNS (or email) validation record — it wasn’t created, was created in the wrong DNS zone, or has a typo.

lookup registry-1.docker.io: no such hostDocker

dial tcp: lookup registry-1.docker.io: no such host / Temporary failure in name resolution during docker build

DNS isn’t working for the Docker daemon or inside build containers, so pulls and package downloads fail.

DNS in podKubernetes

DNS not working inside a Kubernetes pod (could not resolve host / nslookup: can't resolve)

Pods can’t resolve service names or external hosts — CoreDNS is down, blocked by NetworkPolicy, or the upstream resolver fails.