Jump to content

Second IP location of tracerouter is always hidden


neuropulse
 Share

Recommended Posts

The way traceroute works is that it sends out a packet with a slowly increasing TTL (Time To Live) field. When a machine receives this packet and decides it's not the one to handle it (i.e. any machine in the path towards the actual destination machine) it decrements that field and sends it on except when the value becomes 0. In that case an ICMP Time Exceeded packet is sent back to the sending machine to indicate the packet needed more hops to reach its destination than what was allowed.

When you get all stars in the response it only means that the machine that was supposed to send back an ICMP packet simply didn't.

This often happens when stupid network admins feel that ALL ICMP packets tell the outside world too much about the device, possibly not realising that these packets have an important function in the day-to-day operation of the network. What they often want to do is block PING responses (yes, PING is an ICMP packet) because they prove that a machine is there... Yawn. If a hacker wanted to discover a machine (s)he'd use NMAP and discover it more reliably and silently than via PING. By blocking all ICMP packets when you want to connect to a machine that doesn't exist you don't get the ICMP packet that says the destination host is down, you just get nothing and have to wait for a timeout on the socket due to inactivity. Guess which of the two works faster?

In your case it would appear that your router is the 'culprit' that's not sending back ICMP packets. It's stupid but for the most part harmless on smaller (home) networks.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...