1

While exploring traceroute with different protocols, it gave me the following response:

For TCP:

user@200411DC0:~$ sudo traceroute -T facebook.com
traceroute to facebook.com (157.240.16.35), 30 hops max, 60 byte packets
 1  10.0.24.2 (10.0.24.2)  1.717 ms  1.839 ms  1.991 ms
 2  edge-star-mini-shv-01-bom1.facebook.com (157.240.16.35)  0.200 ms  0.225 ms  0.225 ms

For ICMP:

user@200411DC0:~$ sudo traceroute -I facebook.com
traceroute to facebook.com (157.240.16.35), 30 hops max, 60 byte packets
 1  10.0.24.2 (10.0.24.2)  0.752 ms  0.842 ms  1.002 ms
 2  10.0.20.30 (10.0.20.30)  0.905 ms *  0.906 ms
 3  182.19.61.58 (182.19.61.58)  3.459 ms  3.468 ms  3.911 ms
 4  182.19.106.103 (182.19.106.103)  29.733 ms  29.375 ms  29.393 ms
 5  ae41.pr01.bom1.tfbnw.net (103.4.99.20)  30.119 ms  30.576 ms  30.545 ms
 6  157.240.40.229 (157.240.40.229)  30.089 ms  29.540 ms  29.514 ms
 7  173.252.67.117 (173.252.67.117)  29.244 ms  29.260 ms  28.869 ms
 8  edge-star-mini-shv-01-bom1.facebook.com (157.240.16.35)  28.978 ms  30.854 ms  30.523 ms

Normal traceroute (UDP):

user@200411DC0:~$ sudo traceroute facebook.com
traceroute to facebook.com (157.240.16.35), 30 hops max, 60 byte packets
 1  10.0.24.2 (10.0.24.2)  0.709 ms  0.849 ms  0.989 ms
 2  10.0.20.30 (10.0.20.30)  0.592 ms  1.083 ms  1.082 ms
 3  182.19.61.58 (182.19.61.58)  7.468 ms  7.487 ms  7.988 ms
 4  182.19.106.103 (182.19.106.103)  29.952 ms  29.969 ms  30.641 ms
 5  ae41.pr01.bom1.tfbnw.net (103.4.99.20)  46.561 ms  46.580 ms  47.507 ms
 6  po101.psw02.bom1.tfbnw.net (157.240.33.239)  31.415 ms  31.164 ms 157.240.40.229 (157.240.40.229)  30.246 ms
 7  173.252.67.85 (173.252.67.85)  29.516 ms 173.252.67.59 (173.252.67.59)  29.732 ms 173.252.67.121 (173.252.67.121)  29.985 ms
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *
user@200411DC0:~$ 

Can someone explain the difference in the results and also the *'s in the output?

  • There are ISPs that look for traceroute, and they will reroute the traffic to keep you from casually discovering their internal networks. Traceroute is a useful tool on your own network, where you know what to expect, but it can be completely misleading on the public Internet. – Ron Maupin Jul 7 '18 at 20:49
0

It's quite possible that different routes are used for different protocols - esp. with policy based routing. Using this kind of tools in networks you don't control may yield all kinds of results.

* * * for traceroute means that there's been no reply/ICMP message for this TTL value within the time period in all three attempts. Not all devices send ICMP TTL expired messages.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.