RE: Traceroute Question

["Yonatan Bokovza" <Yonatan () xpert com>]

> -----Original Message-----
> From: Vineet Mehta [mailto:vineet () linux com kw]
> Sent: Monday, April 07, 2003 12:20
> To: pen-test () securityfocus com
> Subject: Traceroute Question
>
>
> Hi all,
>
> While trying to do traceroute on one of the server i get the following
> reply:
>
> $traceroute a.b.c.d
<snip>
>  6  192.168.226.38 (192.168.226.38)  71.321 ms  282.457 ms *
>
> My Question is why I am getting 192.168.226.38 non-route able address
> output in traceroute reply? As far as i think these private address
> space is not route able on the internet.

That is correct. Usually when a router returns non-routable
addresses you can assume that it's either hardened or faulty.
This router probably has another interface with non-routable IP
address.

> Any sugestions?

Use online traceroutes (google for "visual route") and see if you
can learn more about your target.
This router might just be an intermediate router at an ISP on the
way- this is not clear from the sample you pasted.


Best Regards, 

Yonatan Bokovza
IT Security Consultant
Xpert Systems

--------------------------------------------------------------
<b>Costs are climbing and complaints are rising
as SPAM overloads your e-mail servers and Inboxes
SurfControl E-mail Filter puts the brakes on spam & viruses
and gives you the reports to prove it.
http://www.securityfocus.com/SurfControl-pen-test2
Download a free trial and see just
what's going in and out of your organization. </b>