Security Incidents mailing list archives
Re: Strange traceroute
From: ash () ASH DE (Hauke Johannknecht)
Date: Tue, 8 Feb 2000 10:52:13 +0100
On Sat, 5 Feb 2000, Troy Ablan wrote:
addresses, so if the route were symmetric, a traceroute from the remote side to your box would encounter lines with all asterisks on the hops where the 10.x.x.x routers would be.
nopes. a response to a traceroute should always come from the interface that points in the "direction" of the tracroutes origin. so an ISP can use rfc1918-adresses on the "customer"-side of his router, but real-IP on the "outer"-side. Gruss, Hauke -- Hauke Johannknecht Berlin / Germany HJ422-RIPE Use PGP ! -> lynx -dump http://www.ash.de/ash.asc | pgp -kaf
Current thread:
- [UPDATE]Dos Trojan on Solaris, (continued)
- [UPDATE]Dos Trojan on Solaris Roderick Padilla (Feb 09)
- Re: [UPDATE]Dos Trojan on Solaris Ross Mueller (Feb 09)
- a very strange scan Boris Badenov (Feb 09)
- Re: a very strange scan Russell Fulton (Feb 10)
- Possible stacheldraht variant/probe Stephen P. Berry (Feb 09)
- Re: Possible stacheldraht variant/probe David Brumley (Feb 10)
- Re: [UPDATE]Dos Trojan on Solaris Robert Lau (Feb 09)
- Re: Strange traceroute Rob Quinn (Feb 08)
- vi as a suid Paulo Ribeiro (Feb 08)
- Re: Strange traceroute Hauke Johannknecht (Feb 08)
- Re: sendmail vunerability ? CyberPsychotic (Feb 07)
- Re: sendmail vunerability ? H D Moore (Feb 10)