RE: Traceroute Question

From: Yonatan Bokovza (Yonatanat_private)
Date: Mon Apr 07 2003 - 08:09:17 PDT

  • Next message: Jorge Coll: "RE: Traceroute Question"

    > -----Original Message-----
    > From: Vineet Mehta [mailto:vineetat_private]
    > Sent: Monday, April 07, 2003 12:20
    > To: pen-testat_private
    > Subject: Traceroute Question
    > 
    > 
    > Hi all,
    > 
    > While trying to do traceroute on one of the server i get the following
    > reply:
    > 
    > $traceroute a.b.c.d
    <snip>
    >  6  192.168.226.38 (192.168.226.38)  71.321 ms  282.457 ms *
    > 
    > My Question is why I am getting 192.168.226.38 non-route able address
    > output in traceroute reply? As far as i think these private address
    > space is not route able on the internet.
    
    That is correct. Usually when a router returns non-routable
    addresses you can assume that it's either hardened or faulty.
    This router probably has another interface with non-routable IP
    address.
    
    > Any sugestions?
    
    Use online traceroutes (google for "visual route") and see if you
    can learn more about your target.
    This router might just be an intermediate router at an ISP on the
    way- this is not clear from the sample you pasted.
    
    
    Best Regards, 
    
    Yonatan Bokovza
    IT Security Consultant
    Xpert Systems
    
    --------------------------------------------------------------
    <b>Costs are climbing and complaints are rising
    as SPAM overloads your e-mail servers and Inboxes
    SurfControl E-mail Filter puts the brakes on spam & viruses
    and gives you the reports to prove it.
    http://www.securityfocus.com/SurfControl-pen-test2
    Download a free trial and see just
    what's going in and out of your organization. </b>
    



    This archive was generated by hypermail 2b30 : Mon Apr 07 2003 - 09:42:17 PDT