Re: getting different ttl values for the same IP

From: Thierry Zoller (Thierry@Zoller.lu)
Date: Thu Dec 29 2005 - 14:51:39 EST


Dear aqua le0,

algc> Hi all

algc> While performing a TCP traceroute using cain&able i got
algc> different ttl values for the same ip, can anyone explain about this

- Load balancing
- NIPS
- ..

algc> 10.10.10.10;401 ms (TTL=230) - TTL exceeded;411 ms (TTL=230) -
algc> TTL exceeded;500 ms (TTL=230) - TTL exceeded;(Unknown)

algc> 10.10.10.10;400 ms (TTL=106) - Echo Reply;401 ms (TTL=102) -
algc> Echo Reply;400 ms (TTL=102) - Echo Reply;(Unknown);

-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 
Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:18 EDT