[Dshield] Odd traceroute, I *think* I know what's going on, but not sure.

Jon Kibler Jon.Kibler at aset.com
Wed Oct 8 17:55:27 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John Hardin wrote:
> On Wed, 8 Oct 2008, Brenden Walker wrote:
<SNIP!>
> 
> C:\Documents and Settings\JHardin>tracert 123.30.74.2
> 
> Tracing route to localhost [123.30.74.2] over a maximum of 30 hops:
> 
>    ...
>    8    34 ms    34 ms    34 ms  ch-telecom-gw.customer.alter.net [63.65.154.70]
>    9   220 ms   220 ms   220 ms  202.97.52.33
>   10   262 ms   220 ms   220 ms  202.97.33.41
>   11   241 ms   242 ms   241 ms  202.97.4.66
>   12   271 ms   275 ms   271 ms  localhost [123.30.63.17]
>   13   258 ms   258 ms   258 ms  203.162.231.210
>   14   258 ms   262 ms   260 ms  localhost [123.30.120.46]
>   15   260 ms   275 ms   259 ms  localhost [123.30.74.2]
> 
> Trace complete.
> 
> 

This is a perfect example why I always run traceroute w/o DNS lookup.
Not only does it run MUCH faster w/o DNS lookup, too often you get
hostnames that do not resolve or resolve to garbage. Useless information
in most cases.

Clue:
  *nix$ traceroute -n WHATEVER
  windoze> tracert -d WHATEVER


Jon K.
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-224-2494
s: 843-564-4224
http://www.linkedin.com/in/jonrkibler

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjs9A4ACgkQUVxQRc85QlOt2gCfWncjkMazlWcNpjeZKa54pX3z
b1MAn0eEMUZnrUe7m0L64mJQy+l4gnfb
=YxCR
-----END PGP SIGNATURE-----




=========================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the Dshield mailing list