Re: hopfake question.

[Murali Raju <protocoljunkie () gmail com>]

Doesn't windows uses ICMP for traceroute (tracert)?

On 9/17/05, Paul Robertson <compuwar () gmail com> wrote:
> On 9/16/05, Jorge Alfredo Garcia <frederix () gmail com> wrote:
> > im trying hopkake by xenion to do some testings about traceroute.
> > Im having some problem testing the code from different locations for
> > example a traceroute from my own country against an ip on my conutry
> > works fine:
> >
> > C:\>tracert 200.125.36.216
>
> [snip]
>
> > [root@ns20303 dark]# traceroute 200.125.34.234
>
> > As you can see the fake hops not appear in the attackers host.
> > I tested a lot and in the majority of the case its seems it doesnt works.
> > Please, i want to know why this problem and if it is there a
> > posibility to fix it.
>
> You're using two different commands from two different operating
> systems.  Linux/Unix uses UDP for traceroute, Windows uses TCP for
> tracert.  If you used tcptraceroute, you'd see the same results, since
> you'd be doing the same thing.
>
> The fix is to extend the software to fake UDP as well.
>
> Paul
> --
> www.compuwar.net
>
> ------------------------------------------------------------------------------
> Audit your website security with Acunetix Web Vulnerability Scanner:
>
> Hackers are concentrating their efforts on attacking applications on your
> website. Up to 75% of cyber attacks are launched on shopping carts, forms,
> login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
> futile against web application hacking. Check your website for vulnerabilities
> to SQL injection, Cross site scripting and other web attacks before hackers do!
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
> -------------------------------------------------------------------------------


-- 
May the packets be with you.

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------