Do you have control of (or access to) the remote machine?
If you do, then you can use wireshark to find out the TTL on
every packet that leaves that machine, then on your local machine you can use
wireshark to find the TTL of packets received from that machine – the difference
is the number of hops.
If you don’t have control of the remote machine you can try
googling for the default TTL for the OS on that box, and if you don’t know the
OS you can work on the assumption that the default TTL is a power of 2.
Of course, if there is something like a NAT in the way then you can’t
do it.
Jim
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Syed Faraz
Hasan
Sent: 30 January 2009 15:57
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Counting no of hops to remote IP address?
I
want to calculate the number of hops from my PC to some remote one. I am doing
it using the tracert DOS command. For example, I want to count the no of hops
to address 84.53.138.41. When I use tracert, it fails after reaching 193.63.68.1
address on 5th hop. My network administrator says its because it is
administratively prohibited.
Can
some one help me on this, preferably through wireshark.
