Re: Stealth vs. Blocked

From: JR (notlikely@nowhere.com)
Date: 02/01/03


From: "JR" <notlikely@nowhere.com>
Date: Fri, 31 Jan 2003 23:19:41 -0500


"Lars M. Hansen" <badnews@hansenonline.net> wrote in message
news:j8hm3vscv50c6tsqm4mqlot7miea8qc475@4ax.com...
> On Fri, 31 Jan 2003 20:47:02 -0500, JR spoketh
>
> >
> >a bit more interesting???? reading but still tells you squat.
> >
>
> try traceroute -v 12.34.56.78
>
> it displays ICMP messages.
>
> Lars M. Hansen
> http://www.hansenonline.net
> (replace 'badnews' with 'news' in e-mail address)

firewall# traceroute -v 12.34.56.78

traceroute to 12.34.56.78 (12.34.56.78), 64 hops max, 44 byte packets

1 10.70.32.1 (10.70.32.1) 36 bytes to 24.226.16.72 47.882 ms 23.601 ms
20.827 ms

2 d226-12-16.home.cgocable.net (24.226.12.16) 36 bytes to 24.226.16.72
10.453 ms 16.631 ms 10.135 ms

3 * * *

4 * * *

5 * * *

still squat. I'm waiting to find out where all the info on a stealthed
machine appears.

seriously. try pinging 216.221.73.139. it is a live IP that I babysit (i'm
the one who reports attempts, and there is nothing of value behind it.)

tell me what you know about this machine after a ping, traceroute or even a
scan, or if it is even up.

JR



Relevant Pages

  • Re: Stealth vs. Blocked
    ... reading but still tells you squat. ... > try traceroute -v 12.34.56.78 ... > it displays ICMP messages. ... > Lars M. Hansen ...
    (comp.security.firewalls)
  • Re: IPFW and icmp
    ... > I'm not a master of the internet RFCs, but I do believe icmp messages have ... > Now to enable traceroute for IPFW, I might put in a rule like this: ... boxen use UDP packets while Microsoft stuff uses ICMP. ...
    (FreeBSD-Security)
  • IPFW and icmp
    ... I'm not a master of the internet RFCs, but I do believe icmp messages have ... Now to enable traceroute for IPFW, I might put in a rule like this: ...
    (FreeBSD-Security)
  • Re: Stealth vs. Blocked
    ... try traceroute -v 12.34.56.78 ... it displays ICMP messages. ... (replace 'badnews' with 'news' in e-mail address) ...
    (comp.security.firewalls)
  • Re: Stealth vs. Blocked
    ... try traceroute -v 12.34.56.78 ... it displays ICMP messages. ... (replace 'badnews' with 'news' in e-mail address) ...
    (alt.computer.security)