RE: Traceroute question

[Omar Salvador Alcalá Ruiz <oalcala () scitum com mx>]

Hi there.

I've seen this scenario under Firewall implementations and NAT/PAT usage,
not just on Cisco, but other vendors as well. I'm not entirely sure, but my
thoughts are that either the host and the NATing device both replies with
the same IP: the one known to the world... And the Firewall is not dropping
correctly outside connections.

Regards.

OA.

-----Original Message-----
From: listbounce () securityfocus com
To: Becky Nelson; pen-test () securityfocus com
Sent: 12/28/2006 6:20 PM
Subject: re: Traceroute question

> From: listbounce () securityfocus com on behalf of Becky Nelson
> Sent: Wed 12/27/2006 8:36 PM
> To: pen-test () securityfocus com
>
> I am running a traceroute and have two hops that report the same
> address.  Could someone please explain what would cause this?  I
> suspect that this is some type of firewall?
>
> Regards,
>
> Ralf

Becky...err Ralf,
 
Possibly load balanced network(s) in between you and
the traced destination.