Penetration Testing mailing list archives

Re: getting different ttl values for the same IP


From: Thierry Zoller <Thierry () Zoller lu>
Date: Thu, 29 Dec 2005 20:51:39 +0100

Dear aqua le0,

algc> Hi all

algc> While performing a TCP traceroute using cain&able i got
algc> different ttl values for the same ip, can anyone explain about this

- Load balancing
- NIPS
- ..

algc> 10.10.10.10;401 ms (TTL=230) - TTL exceeded;411 ms (TTL=230) -
algc> TTL exceeded;500 ms (TTL=230) - TTL exceeded;(Unknown)

algc> 10.10.10.10;400 ms (TTL=106) - Echo Reply;401 ms (TTL=102) -
algc> Echo Reply;400 ms (TTL=102) - Echo Reply;(Unknown);



-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: