1

I tried to execute a tracert command in cmd in Windows 10, specifically, tracert www.ieee.org.

In the same time, I captured the packets with wireshark.

How can I find the time duration of my tracert command?

I guess the tracert starts with this line in wireshark: Standard query 0xb49e A www.ieee.org

But I am not sure when tracert ends and with which packet.

Also, while the tracert command is executed, there are other packets, from other apps in my computer that are obviously unrelated to the tracert, that interfere with the packets that tracert sends. Does those unrelated packets affect the time duration of tracert? How should I calculate the time of tracert command in wireshark?

Sorry, if this is a stupid question, I have no idea about networking.

  • 1
    The running duration of a host command is a host issue, pretty much off-topic here. – Zac67 Dec 19 '19 at 14:03
1

You can filter the Wireshark display to only show ICMP packets to the target host.

Put this in the filter window:

icmp

Or, you can use

ip.addr==1.2.3.4  (target IP)
| improve this answer | |
  • Part B of my exercise asks what protocols where used. I know tracert uses icmp packets but there are also dns packets (ie Standard query 0xb49e A www.ieee.org, this is the info of the first packet, which is a dns packet, that is captured after the tracert command). – Κωνσταντίνος Κορναράκης Dec 19 '19 at 21:47
  • 2
    DNS is not part of traceroute, but you can try icmp || domain – Ron Trunk Dec 20 '19 at 0:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.