Re: getting different ttl values for the same IP

> While performing a TCP traceroute using cain&able i got different ttl values for the same ip, can anyone explain about this
>
>
> 10.10.10.10;401 ms (TTL=230) - TTL exceeded;411 ms (TTL=230) - TTL exceeded;500 ms (TTL=230) - TTL exceeded;(Unknown)
>
> 10.10.10.10;400 ms (TTL=106) - Echo Reply;401 ms (TTL=102) - Echo Reply;400 ms (TTL=102) - Echo Reply;(Unknown);


Hmm, well the first packet is a TTL exceeded message. Do you suppose
the RFCs call for a high TTL for that specific message, since one would
want to be sure it doesn't also die due to TTL issues? This is just
speculation, but it would make sense... The max TTL is of course 255,
so maybe that box is 25 hops away?

tim

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------

Relevant Pages

  • Re: OS Fingerprints
    ... > identify the target operating system from its TTL ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • RE: getting different ttl values for the same IP
    ... Since almost all operating systems have an initial TTL of either 32,64,128 ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
    (Pen-Test)
  • Re: OS Fingerprints
    ... Not always the initial TTL is enough to identify an operative system. ... > identify the target operating system from its TTL ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
    (Pen-Test)
  • Re: OS Fingerprints
    ... Not always the initial TTL is enough to identify an operative system. ... >> identify the target operating system from its TTL ... >> Audit your website security with Acunetix Web Vulnerability Scanner: ... Up to 75% of cyber attacks are launched on shopping carts, ...
    (Pen-Test)
  • Re: OS Fingerprints
    ... > identify the target operating system from its TTL ... Audit your website security with Acunetix Web Vulnerability Scanner: ... Cross site scripting and other web attacks before hackers do! ...
    (Pen-Test)