Sunday, 31 January 2016

Tracing the routes

You would need to know the IP address of the webserver in order to trace the exact location. There are several methods to figure it out. We will use the simplest one, that is, the ping command. Ping command sends icmp echo requests to check if the website is up. It’s used for network troubleshooting purposes.
From your command line, type the following:
The output would be as follows:
C:\Users\ Rafay Baloch>ping http://www.techlotips.com
Pinging techlotips.com [50.22.81.62] with 32 bytes of data
Reply from 50.22.81.62: bytes = 32 time = 304ms TTL =47
Reply from 50.22.81.62: bytes = 32 time = 282ms TTL =47
Reply from 50.22.81.62: bytes = 32 time = 291ms TTL =47
Reply from 50.22.81.62: bytes = 32 time = 297ms TTL =47
So we now know that the IP address of our target is 50.22.81.62. After determining the web-
server’s IP, we can use some online tools to track the exact location of the webserver. One such tool is IPTracer that is available at http://www.ip-adress.com/ip_tracer/yourip
Just replace your IP with your target’s IP, and it will show you the exact location of the web-
server via Google Maps.
pic6
Traceroute
Traceroute is a very popular utility available in both Windows and Linux. It is used for network orientation. By network orientation I don’t mean scanning a host for open ports or scanning for services running on a port. It means to figure out how the network topology, firewalls, load balancers, and control points, etc. are implemented on the network.
A traceroute uses a TTL (time to live) field from the IP header, and it increments the IP packet in order to determine where the system is. The time to live value decreases every time it reaches a hop on the network (i.e. router to server is one hop).
There are three different types of traceroutes:
1. ICMP traceroute (which is used in Windows by default)
2. TCP traceroute
3. UDP traceroute
ICMP Traceroute
Microsoft Windows by default uses ICMP traceroute; however, after a few hops, you will get a timeout, which indicates that there might be a device like IDS or firewall that is blocking ICMP echo requests.
From this image you can see that the ICMP echo requests are timed out after seven requests.
pic7.png
TCP Traceroute
Many devices are configured to block ICMP traceroutes. This is where we try TCP or UDP traceroutes, also known as layer 4 traceroutes. TCP traceroute is by default available in BackTrack. If you can’t find it, just use the following command:
apt-get install tcptraceroute
Usage
From the command line, you would need to issue the following command:
tcptraceroute http://www.google.com
UDP Traceroute
Linux also has a traceroute utility, but unlike Windows, it uses UDP protocol for the traceroute. In Windows, the command for traceroute is “tracrt”. In, Linux, it’s “tracroute”.
Usage
NeoTrace
NeoTrace is a very fine GUI-based tool for mapping out a network.
pic8.png
Cheops-ng
Cheops-ng is another remarkable tool for tracing and fingerprinting a network. This image speaks thousand words.


pic9.png

No comments:

Post a Comment